PT-2008-2069 · Hewlett Packard · Hp Virtual Rooms

E.B · Published 2008-01-23 · Updated 2017-09-29 · CVE-2008-0437

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Virtual Rooms version 1.0.0.100

Description The issue is related to multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control, which is part of the HP Virtual Rooms installation process. This can be exploited by remote attackers to execute arbitrary code via long values of the AuthenticationURL, PortalAPIURL, or cabroot properties.

Recommendations For version 1.0.0.100, as a temporary workaround, consider restricting the length of the AuthenticationURL, PortalAPIURL, and cabroot property values to prevent buffer overflows until a patch is available.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0437

Affected Products

Hp Virtual Rooms

References · 7

• 🔥 https://exploit-db.com/exploits/4959 · Exploit
• http://secunia.com/advisories/28595 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0437 · Security Note
• http://securityfocus.com/bid/27384 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39836 · Note
• http://vupen.com/english/advisories/2008/0236 · Note
• http://marc.info/?l=full-disclosure&m=120098751528333&w=2 · Note