CVEvulnerability
CVE-2008-0437
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-01-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.
Affected configurations
• hp virtual rooms 1.0.0.100
• microsoft activex
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://marc.info/?l=full-disclosure&m=120098751528333&w=2 marc.info
- http://secunia.com/advisories/28595 Vendor Advisory
- http://www.securityfocus.com/bid/27384 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0236 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39836 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4959 www.exploit-db.com
- http://marc.info/?l=full-disclosure&m=120098751528333&w=2 marc.info
- http://secunia.com/advisories/28595 Vendor Advisory
- http://www.securityfocus.com/bid/27384 www.securityfocus.com
- http://www.vupen.com/english/advisories/2008/0236 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39836 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4959 www.exploit-db.com