{"uuid": "36b90286-d323-47d4-85cc-4fee19d96580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2011-2657", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/zenworks_helplauncher_exec.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"rgod\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in AdminStudio LaunchHelp.dll ActiveX control. The\\n          LaunchProcess function found in LaunchHelp.HelpLauncher.1 allows remote attackers to run\\n          arbitrary commands on the victim machine. This module has been successfully tested with the\\n          ActiveX installed with AdminStudio 9.5, which also comes with Novell ZENworks Configuration\\n          Management 10 SP2, on IE 6 and IE 8 over Windows XP SP 3.\", \"disclosure_date\": \"2011-10-19\", \"fullname\": \"exploit/windows/browser/zenworks_helplauncher_exec\", \"is_install_path\": true, \"mod_time\": \"2026-03-11 21:31:08 +0000\", \"name\": \"AdminStudio LaunchHelp.dll ActiveX Arbitrary Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/zenworks_helplauncher_exec.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/zenworks_helplauncher_exec\", \"references\": [\"CVE-2011-2657\", \"OSVDB-76700\", \"BID-50274\", \"ZDI-11-318\", \"URL-http://www.novell.com/support/viewContent.do?externalId=7009570&sliceId=1\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows Universal\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:17.466560Z"}