Detections
Analytics
Flexera ISGrid ActiveX Control Remote Code Execution Vulnerabilities
medium Nessus Plugin ID 62393
Language:
Synopsis
The remote host has software installed that is affected by remote code execution vulnerabilities.Description
The remote host has the Flexera ISGrid ActiveX control installed. The control is affected by remote code execution vulnerabilities that can be triggered via the 'bstrReplaceText()' and 'DoFindReplace()' methods. By tricking a victim into visiting a specially crafted page, an attacker may be able to execute arbitrary code on the host.Solution
Apply the hotfix from Flexera.See Also
https://www.zerodayinitiative.com/advisories/ZDI-11-319/
Plugin Details
Severity: Medium
ID: 62393
File Name: flexera_isgrid2_activex_rce.nasl
Version: 1.11
Type: local
Agent: windows
Family: Windows
Published: 10/2/2012
Updated: 12/4/2019
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.8
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2011-3174
Vulnerability Information
CPE: x-cpe:/a:flexera:adminstudio, x-cpe:/a:flexera:installshield, cpe:/a:novell:zenworks_configuration_management
Required KB Items: SMB/Registry/Enumerated
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/19/2011
Vulnerability Publication Date: 10/19/2011
Reference Information
CVE: CVE-2011-3174