Unscored severity · published Jun 12, 2008
CVE-2008-0956
Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before…
–
CVSS
8.4%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.4% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Backweb · Backweb
through 8.1.1.86 · source: NVD
DM
Desktop Manager · Logitech
through 2.55 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0956
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0956
URL Repurposed
http://backweb.com/news_events/press_releases/051608.php
marc.info
http://marc.info/?l=bugtraq&m=121380194923597&w=2
Vendor Advisory
http://secunia.com/advisories/30598
Vendor Advisory
http://secunia.com/advisories/30625
Patch
http://www.kb.cert.org/vuls/id/216153
www.securityfocus.com
http://www.securityfocus.com/bid/29558