CVE-2011-1036
- State
- Published
- Severity
- Not scored
- Published
- Feb 25, 2011
- Updated
- Aug 6, 2024
- Reserved
- Feb 18, 2011
Description
The XML Security Database Parser class in the XMLSecDB ActiveX control in the HIPSEngine component in the Management Server before 8.1.0.88, and the client before 1.6.450, in CA Host-Based Intrusion Prevention System (HIPS) 8.1, as used in CA Internet Security Suite (ISS) 2010, allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via vectors involving the SetXml and Save methods.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2011-0496vdb-entry
- 43490third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-11-093
- 43377third-party-advisory
- 46539vdb-entry
- 20110223 ZDI-11-093: CA Internet Security Suite HIPS XML Security Database Parser Class Remote Code Execution Vulnerabilitymailing-list
- 8106third-party-advisory
- 20110225 CA20110223-01: Security Notice for CA Host-Based Intrusion Prevention Systemmailing-list
- 1025120vdb-entry
- ca-products-activex-file-overwrite(65632)vdb-entry
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B53A608DF-BFDB-4AB3-A98F-E4BB6BC7A2F4%7D
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.