CA BrightStor ARCserve Backup ListCtrl Buffer Overflow Exploit

This module exploits a vulnerability in the ListCtrl ActiveX Control (ListCtrl.ocx) used CA BrighStor ARCserve Backup. The exploit is triggered when a long string argument is processed by the AddColumn() method resulting in a stack-based buffer overflow. This module runs a malicious web site on the CORE IMPACT Console and waits for an unsuspecting user to trigger the exploit by connecting to the web site.
Exploit type: 
Platform: 
Vulnerabilty ID: 
CVE-2008-1472
Product Version: 
7.5
Released Date: 
Thursday, May 22, 2008 - 00:00