Vulnerability Description
The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute arbitrary WMI Query Language (WQL) statements via a crafted value, as demonstrated by a value that triggers disclosure of information about installed software.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Dellsystemlite.Scanner Activex Control | 1.0.0.0 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/42880Vendor Advisory
- http://secunia.com/secunia_research/2011-11/Vendor Advisory
- http://www.securityfocus.com/bid/46443
- http://www.securitytracker.com/id?1025094
- http://secunia.com/advisories/42880Vendor Advisory
- http://secunia.com/secunia_research/2011-11/Vendor Advisory
- http://www.securityfocus.com/bid/46443
- http://www.securitytracker.com/id?1025094
FAQ
What is CVE-2011-0330?
CVE-2011-0330 is a vulnerability with a CVSS score of 5.0 (MEDIUM). The Dell DellSystemLite.Scanner ActiveX control in DellSystemLite.ocx 1.0.0.0 does not properly restrict the values of the WMIAttributesOfInterest property, which allows remote attackers to execute ar...
How severe is CVE-2011-0330?
CVE-2011-0330 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-0330?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Dellsystemlite.Scanner Activex Control.