Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2008-0437

Published: 23/01/2008 Updated: 29/09/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Virtual Rooms

Vulnerability Summary

Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote malicious users to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.

Vulnerable Product Search on Vulmon Subscribe to Product

hp virtual rooms 1.0.0.100

microsoft activex

Exploits

Exploit DB: HP Virtual Rooms WebHPVCInstall Control - Remote Buffer Overflow
<!-- HP Virtual Rooms WebHPVCInstall Control Buffer Overflow Exploit written by eb Note that I did not have time to work out some heap fragmentation issues so this code is NOT reliable Tested on Windows XP SP2(fully patched) English, IE6, hpvirtualrooms14dll version 100100 Thanks to rgod, hdm and the Metasploit crew --> <html ...

References

CWE-119http://marc.info/?l=full-disclosure&m=120098751528333&w=2http://www.securityfocus.com/bid/27384http://secunia.com/advisories/28595http://www.vupen.com/english/advisories/2008/0236https://exchange.xforce.ibmcloud.com/vulnerabilities/39836https://www.exploit-db.com/exploits/4959https://nvd.nist.govhttps://www.exploit-db.com/exploits/4959/
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4761command injectionCVE-2024-3676IDORCVE-2024-30039CVE-2024-32113CVE-2024-30049CVE-2024-4776SQL injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook