CVE-2008-4728

Published: 24/10/2008 Updated: 14/02/2024

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 945

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote malicious users to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hummingbird deployment wizard 2008

-------------------------------------------------------------------------------- Hummingbird Deployment Wizard 2008 (DeployRundll) Arbitrary File Execution(2) url: wwwhummingbirdcom Author: shinnai mail: shinnai[at]autistici[dot]org site: wwwshinnainet This was written for educational purpose Use it at your own risk Au ...

------------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 (DeployRundll) Registry Values Creation/Change url: wwwhummingbirdcom Author: shinnai mail: shinnai[at]autistici[dot]org site: wwwshinnainet This was written for educational purpose Use it at your own r ...

------------------------------------------------------------------------------ Hummingbird Deployment Wizard 2008 (DeployRundll) Arbitrary File Execution url: wwwhummingbirdcom Author: shinnai mail: shinnai[at]autistici[dot]org site: wwwshinnainet This was written for educational purpose Use it at your own risk Author ...

NVD-CWE-Other http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html http://secunia.com/advisories/32337 http://www.securityfocus.com/bid/31799 http://www.vupen.com/english/advisories/2008/2857 https://exchange.xforce.ibmcloud.com/vulnerabilities/45961 https://www.exploit-db.com/exploits/6776 https://www.exploit-db.com/exploits/6774 https://www.exploit-db.com/exploits/6773 https://nvd.nist.gov https://www.exploit-db.com/exploits/6776/

CVE-2008-4728

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect