CVE:CVE-2008-1472
CNNVD:CNNVD-200803-381
BrightStor ARCserve Backup可为各种平台的服务器提供备份和恢复保护功能。
BrightStor ARCserve Backup所安装的ListCtrl ActiveX控件(ListCtrl.ocx)没有正确地验证对AddColumn()方式的输入，如果用户受骗访问了恶意网页并向该方式传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。
solution:Upgrade computer_associates brightstor_arcserve_backup_laptops_desktops to a higher version than 11.5,and avoid the version 11.5; Upgrade computer_associates desktop_management_suite to a higher version than r11.1:a,r11.1:c1,r11.1:ga,r11.2,and avoid the version r11.1:a,r11.1:c1,r11.1:ga,r11.2; Upgrade computer_associates unicenter_dsm_r11_list_control_atx to a higher version than 11.2.3.1895,and avoid the version 11.2.3.1895; Upgrade unicenter asset_management to a higher version than r11.1:a,r11.1:c1,r11.1:ga,r11.2,r11.2:a,r11.2:c1,and avoid the version r11.1:a,r11.1:c1,r11.1:ga,r11.2,r11.2:a,r11.2:c1; Upgrade unicenter desktop_management_bundle to a higher version than r11.1:a,r11.1:c1,r11.1:ga,r11.2,r11.2:a,r11.2:c1,and avoid the version r11.1:a,r11.1:c1,r11.1:ga,r11.2,r11.2:a,r11.2:c1; Upgrade unicenter remote_control to a higher version than r11.1:a,r11.1:c1,r11.1:ga,r11.2,r11.2:a,r11.2:c1,and avoid the version r11.1:a,r11.1:c1,r11.1:ga,r11.2,r11.2:a,r11.2:c1; Upgrade unicenter software_delivery to a higher version than r11.1:a,r11.1:c1,r11.1:ga,r11.2,r11.2:a,r11.2:c1,and avoid the version r11.1:a,r11.1:c1,r11.1:ga,r11.2,r11.2:a,r11.2:c1