PT-2010-2754 · Tetradyne+1 · Tetradyne Activex+1

Published 2010-04-21 · Updated 2024-02-14 · CVE-2010-1033

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Operations Manager versions 7.5, 8.10, 8.16

Description The issue is related to multiple stack-based buffer overflows in a certain Tetradyne ActiveX control. This could allow remote attackers to execute arbitrary code via a long string argument to the (1) LoadFile or (2) SaveFile method. The problem is associated with the srcvw32.dll and srcvw4.dll files.

Recommendations For HP Operations Manager versions 7.5, 8.10, 8.16, consider disabling the LoadFile and SaveFile methods as a temporary workaround until a patch is available. Restrict access to the srcvw32.dll and srcvw4.dll files to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-1033

Affected Products

Hp Operations Manager

Tetradyne Activex

References · 11

• 🔥 https://exploit-db.com/exploits/12302 · Exploit
• http://vupen.com/english/advisories/2010/0946 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-1033 · Security Note
• http://secunia.com/advisories/39538 · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02078800 · Vendor Advisory
• http://net-ninja.net/blog/media/blogs/b/exploits/hpoperationsmngr.html.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/57938 · Note
• http://securityfocus.com/bid/39578 · Note
• http://corelan.be:8800/advisories.php?id=CORELAN-10-027 · Note
• http://corelan.be:8800/wp-content/forum-file-uploads/mr_me/hpoperationsmngr.html.txt · Note
• http://securitytracker.com/id?1023894 · Note