Published: 24/10/2008 Updated: 29/09/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and previous versions allows remote malicious users to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hummingbird exceed
hummingbird exceed 9.0
hummingbird exceed 10.0
hummingbird exceed powersuite
hummingbird exceed 2007
hummingbird exceed 2006

<html>  <object classid='clsid:FFB6CC68-702D-4FE2-A8E7-4DE23835F0D2' id='target' ></object> <script language='vbscript'> arg1="0011012201230124 ...

CWE-119 http://secunia.com/advisories/32319 http://securityreason.com/securityalert/4505 http://www.securityfocus.com/bid/31783 https://exchange.xforce.ibmcloud.com/vulnerabilities/45941 https://www.exploit-db.com/exploits/6761 https://nvd.nist.gov https://www.exploit-db.com/exploits/6761/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-4729

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect