CVEvulnerability
CVE-2007-6530
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function.
Affected configurations
• groove virtual office
• hp loadrunner
• persits xupload 2.1.0.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://marc.info/?l=full-disclosure&m=119863639428564&w=2 Exploit
- http://osvdb.org/39901 osvdb.org
- http://secunia.com/advisories/28145 Vendor Advisory
- http://secunia.com/advisories/28205 Vendor Advisory
- http://secunia.com/advisories/28218 Vendor Advisory
- http://www.securityfocus.com/bid/27025 Exploit
- http://www.securitytracker.com/id?1019147 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/4310 www.vupen.com
- http://marc.info/?l=full-disclosure&m=119863639428564&w=2 Exploit
- http://osvdb.org/39901 osvdb.org
- http://secunia.com/advisories/28145 Vendor Advisory
- http://secunia.com/advisories/28205 Vendor Advisory
- http://secunia.com/advisories/28218 Vendor Advisory
- http://www.securityfocus.com/bid/27025 Exploit
- http://www.securitytracker.com/id?1019147 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/4310 www.vupen.com