PT-2008-2565 · Logitech+1 · Logitech Desktop Manager+1

Will Dormann · Published 2008-06-12 · Updated 2024-02-14 · CVE-2008-0956

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions BackWeb versions prior to 8.1.1.87 Logitech Desktop Manager versions prior to 2.56

Description The issue is related to multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control. This allows remote attackers to execute arbitrary code via unspecified vectors.

Recommendations For BackWeb versions prior to 8.1.1.87, update to version 8.1.1.87 or later. For Logitech Desktop Manager versions prior to 2.56, update to version 2.56 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0956

Affected Products

Backweb

Logitech Desktop Manager

References · 12

• http://kb.cert.org/vuls/id/216153 · Patch
• http://secunia.com/advisories/30625 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0956 · Security Note
• http://marc.info/?l=bugtraq&m=121380194923597&w=2 · Vendor Advisory
• http://secunia.com/advisories/30598 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-032 · Vendor Advisory
• http://securityfocus.com/bid/29558 · Note
• http://us-cert.gov/cas/techalerts/TA08-162B.html · Note
• http://backweb.com/news_events/press_releases/051608.php · Note
• http://vupen.com/english/advisories/2008/1791 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42991 · Note
• http://vupen.com/english/advisories/2008/1792 · Note