VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Mar 29, 2013· Updated Apr 29, 2026

CVE-2013-1079

CVE-2013-1079

Description

Directory traversal vulnerability in the ISCreateObject method in an ActiveX control in InstallShield\ISProxy.dll in AdminStudio in Novell ZENworks Configuration Management (ZCM) 10.3 through 11.2 allows remote attackers to execute arbitrary local DLL files via a crafted web page that also calls the Initialize method.

Affected products

8
  • Novell/Zenworks Configuration Management8 versions
    cpe:2.3:a:novell:zenworks_configuration_management:10.3:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:novell:zenworks_configuration_management:10.3:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:10.3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:10.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:10.3.3:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:11:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:11.1a:*:*:*:*:*:*:*
    • cpe:2.3:a:novell:zenworks_configuration_management:11.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.