PT-2008-2069 · Hewlett Packard · Hp Virtual Rooms

E.B · Publicado 2008-01-23 · Atualizado 2017-09-29 · CVE-2008-0437

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Virtual Rooms version 1.0.0.100

Description The issue is related to multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control, which is part of the HP Virtual Rooms installation process. This can be exploited by remote attackers to execute arbitrary code via long values of the AuthenticationURL, PortalAPIURL, or cabroot properties.

Recommendations For version 1.0.0.100, as a temporary workaround, consider restricting the length of the AuthenticationURL, PortalAPIURL, and cabroot property values to prevent buffer overflows until a patch is available.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-0437

Produtos afetados

Hp Virtual Rooms

Referências · 7

• 🔥 https://exploit-db.com/exploits/4959 · Exploit
• http://securityfocus.com/bid/27384 · Nota
• http://secunia.com/advisories/28595 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0437 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39836 · Nota
• http://vupen.com/english/advisories/2008/0236 · Nota
• http://marc.info/?l=full-disclosure&m=120098751528333&w=2 · Nota