PT-2011-2273 · Dell · Dellsystemlite.Ocx

Published 2011-02-21 · Updated 2011-03-18 · CVE-2011-0330

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DellSystemLite.ocx version 1.0.0.0

Description The issue allows remote attackers to execute arbitrary WMI Query Language (WQL) statements via a crafted value of the WMIAttributesOfInterest property. This can be used to disclose information about installed software.

Recommendations For DellSystemLite.ocx version 1.0.0.0, consider restricting the values of the WMIAttributesOfInterest property to prevent the execution of arbitrary WQL statements. As a temporary workaround, consider disabling the use of the WMIAttributesOfInterest property until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-0330

Affected Products

Dellsystemlite.Ocx

References · 5

• http://secunia.com/secunia_research/2011-11 · Vendor Advisory
• http://secunia.com/advisories/42880 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0330 · Security Note
• http://securityfocus.com/bid/46443 · Note
• http://securitytracker.com/id?1025094 · Note