Vulnerability Details CVE-2011-3174
Buffer overflow in the DoFindReplace function in the ISGrid.Grid2.1 ActiveX control in InstallShield/ISGrid2.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.2, 10.3, and 11 SP1 allows remote attackers to execute arbitrary code via a long bstrReplaceText parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.203
EPSS Ranking 95.2%
CVSS Severity
CVSS v2 Score 6.8
References
Products affected by CVE-2011-3174
-
cpe:2.3:a:novell:zenworks_configuration_management:10.2
-
cpe:2.3:a:novell:zenworks_configuration_management:10.3
-
cpe:2.3:a:novell:zenworks_configuration_management:11