CVEvulnerability

CVE-2011-2658

6.8 MEDIUM Published 2012-07-26 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2012-07-26
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses: CWE-264

Description

The ISList.ISAvi ActiveX control in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 provides access to the mscomct2.ocx file, which allows remote attackers to execute arbitrary code by leveraging unspecified mscomct2 flaws.

Affected configurations

• novell zenworks configuration management 10.2 • novell zenworks configuration management 10.3 • novell zenworks configuration management 11

Weakness · not in database (1)

CWE-264

References

http://www.novell.com/support/kb/doc.php?id=7009570 Patch
http://www.zerodayinitiative.com/advisories/ZDI-11-317/ Patch
http://www.novell.com/support/kb/doc.php?id=7009570 Patch
http://www.zerodayinitiative.com/advisories/ZDI-11-317/ Patch

CVE-2011-2658

Description

Affected configurations

Related

Weakness · not in database (1)

References