PT-2011-2273 · Dell · Dellsystemlite.Ocx

Publicado 2011-02-21 · Atualizado 2011-03-18 · CVE-2011-0330

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DellSystemLite.ocx version 1.0.0.0

Description The issue allows remote attackers to execute arbitrary WMI Query Language (WQL) statements via a crafted value of the WMIAttributesOfInterest property. This can be used to disclose information about installed software.

Recommendations For DellSystemLite.ocx version 1.0.0.0, consider restricting the values of the WMIAttributesOfInterest property to prevent the execution of arbitrary WQL statements. As a temporary workaround, consider disabling the use of the WMIAttributesOfInterest property until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2011-0330

Produtos afetados

Dellsystemlite.Ocx

Referências · 5

• http://secunia.com/secunia_research/2011-11 · Aviso do Fabricante
• http://securityfocus.com/bid/46443 · Nota
• http://securitytracker.com/id?1025094 · Nota
• http://secunia.com/advisories/42880 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0330 · Nota de Segurança