Exploitation Summary
CVE-2008-1472 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, h07, including a Metasploit module exploits/windows/browser/ca_brightstor_addcolumn.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in the CA BrightStor ARCserve Backup ActiveX control (ListCtrl.ocx) via the AddColumn() method. It delivers a payload through a malicious HTML page, leveraging JavaScript to trigger the vulnerability.
Description
Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.
Exploits (3)
This is a Metasploit module exploiting a stack-based buffer overflow in the CA BrightStor ARCserve Backup ActiveX control (ListCtrl.ocx) via the AddColumn() method. It delivers a payload through a malicious HTML page, leveraging JavaScript to trigger the vulnerability.
This exploit targets a buffer overflow vulnerability in CA BrightStor ARCserve Backup r11.5 via the AddColumn() method in the ListCtrl.ocx ActiveX control. It uses a heap spray technique to achieve remote code execution by overwriting memory with shellcode.
This Metasploit module exploits a stack-based buffer overflow in the CA BrightStor ARCserve Backup ActiveX control (ListCtrl.ocx) via the AddColumn() method. It delivers a malicious HTML page with obfuscated JavaScript to trigger the overflow and execute arbitrary code.