CVE:CVE-2008-1786
CNNVD:CNNVD-200804-237
CA桌面和服务器管理(DSM)产品中包含多种应用，分别用来执行软件分发、远程控制和资产管理任务。
DSM产品所提供的gui_cm_ctrls ActiveX控件没有充分的验证函数输入，如果用户受骗访问了恶意网页的话就可能导致拒绝服务或在WEB浏览器会话中执行任意代码。
solution:Upgrade computer_associates arcserve_backup_laptops_and_desktops to a higher version than r11.5,and avoid the version r11.5; Upgrade computer_associates desktop_and_server_management to a higher version than r11.1,r11.2,r11.2a,r11.2c1,r11.2c2,and avoid the version r11.1,r11.2,r11.2a,r11.2c1,r11.2c2; Upgrade computer_associates desktop_management_suite to a higher version than r11.2,r11.2a,r11.2c1,r11.2c2,and avoid the version r11.2,r11.2a,r11.2c1,r11.2c2; Upgrade computer_associates unicenter_asset_management to a higher version than r11.1,r11.2,r11.2a,r11.2c1,r11.2c2,and avoid the version r11.1,r11.2,r11.2a,r11.2c1,r11.2c2; Upgrade computer_associates unicenter_desktop_management_bundle to a higher version than r11.1,r11.2,r11.2a,r11.2c1,r11.2c2,and avoid the version r11.1,r11.2,r11.2a,r11.2c1,r11.2c2; Upgrade computer_associates unicenter_remote_control to a higher version than r11.1,r11.2,r11.2a,r11.2c1,r11.2c2,and avoid the version r11.1,r11.2,r11.2a,r11.2c1,r11.2c2; Upgrade computer_associates unicenter_software_delivery to a higher version than r11.1,r11.2,r11.2a,r11.2c1,r11.2c2,and avoid the version r11.1,r11.2,r11.2a,r11.2c1,r11.2c2