Novell ZENworks Configuration Management AdminStudio ActiveX Controls Vulnerabilities

Multiple vulnerabilities have been reported in Novell ZENworks Configuration Management, which can be exploited by malicious people to compromise a user's system.

1. An unspecified error in the "DoFindReplace()" method within the SIGrid.Grid.1 ActiveX control can be exploited via certain input passed in the "bstrReplaceText" parameter.
2. An unspecified error exists in the Antique ActiveX control, and the help.Dall ActiveX control related to the Launch process functionality.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.