Published: 27/12/2007 Updated: 08/03/2011

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions prior to 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote malicious users to execute arbitrary code via a long argument to the AddFolder function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
persits xupload 2.1.0.1
groove virtual office
hp loadrunner

<html> <head> <title>Persits Software XUpload Control AddFolder BoF Exploit</title> <script language="JavaScrip ...

## # $Id: hp_loadrunner_addfolderrb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...

CWE-119 http://marc.info/?l=full-disclosure&m=119863639428564&w=2 http://www.securityfocus.com/bid/27025 http://secunia.com/advisories/28145 http://secunia.com/advisories/28205 http://secunia.com/advisories/28218 http://www.securitytracker.com/id?1019147 http://osvdb.org/39901 http://www.vupen.com/english/advisories/2007/4310 https://nvd.nist.gov https://www.exploit-db.com/exploits/4806/

CVE-2007-6530

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect