CVE-2008-0956

Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via unspecified vectors.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://backweb.com/news_events/press_releases/051608.php	URL Repurposed
http://marc.info/?l=bugtraq&m=121380194923597&w=2
http://secunia.com/advisories/30598	Vendor Advisory
http://secunia.com/advisories/30625	Vendor Advisory
http://www.kb.cert.org/vuls/id/216153	Patch US Government Resource
http://www.securityfocus.com/bid/29558
http://www.us-cert.gov/cas/techalerts/TA08-162B.html	US Government Resource
http://www.vupen.com/english/advisories/2008/1791
http://www.vupen.com/english/advisories/2008/1792
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-032
https://exchange.xforce.ibmcloud.com/vulnerabilities/42991

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:backweb:backweb::::::::
	cpe:2.3:a:logitech:desktop_manager::::::::

History

No history.

Information

Published : 2008-06-12 02:32

Updated : 2024-02-14 01:17

NVD link : CVE-2008-0956

Mitre link : CVE-2008-0956

CVE.ORG link : CVE-2008-0956

JSON object : View

Products Affected

logitech

desktop_manager

backweb

backweb

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2008-0956", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-06-12T02:32:00.000", "references": [{"url": "http://backweb.com/news_events/press_releases/051608.php", "tags": ["URL Repurposed"], "source": "cret@cert.org"}, {"url": "http://marc.info/?l=bugtraq&m=121380194923597&w=2", "source": "cret@cert.org"}, {"url": "http://secunia.com/advisories/30598", "tags": ["Vendor Advisory"], "source": "cret@cert.org"}, {"url": "http://secunia.com/advisories/30625", "tags": ["Vendor Advisory"], "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/216153", "tags": ["Patch", "US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.securityfocus.com/bid/29558", "source": "cret@cert.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA08-162B.html", "tags": ["US Government Resource"], "source": "cret@cert.org"}, {"url": "http://www.vupen.com/english/advisories/2008/1791", "source": "cret@cert.org"}, {"url": "http://www.vupen.com/english/advisories/2008/1792", "source": "cret@cert.org"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-032", "source": "cret@cert.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42991", "source": "cret@cert.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via unspecified vectors."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer basados en pila en el control ActiveX BackWeb Lite Install Runner en el objeto BackWeb Web Package ActiveX en LiteInstActivator.dll en BackWeb antes de 8.1.1.87, tal como es utilizado en Logitech Desktop Manager (LDM) antes de 2.56, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-02-14T01:17:43.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:backweb:backweb:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F6C64B4-5C70-4407-85C5-9C378D9C6C93", "versionEndIncluding": "8.1.1.86"}, {"criteria": "cpe:2.3:a:logitech:desktop_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "390E21E8-0B91-40E7-9D1F-5FDB30BFDAE1", "versionEndIncluding": "2.55"}], "operator": "OR"}]}], "sourceIdentifier": "cret@cert.org"}