cbcvebase.
CVE-2011-3174
published 2012-07-26

CVE-2011-3174: Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks…

PriorityP335medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
2.90%
85.4th percentile
Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary code via a long bstrReplaceText parameter.

Affected

3 ranges
VendorProductVersion rangeFixed in
novellzenworks_configuration_management——
novellzenworks_configuration_management——
novellzenworks_configuration_management——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.