CVE-2007-6530

Опубликовано: 27 дек. 2007

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function.

Ссылки

http://marc.info/?l=full-disclosure&m=119863639428564&w=2
Exploit
http://osvdb.org/39901
http://secunia.com/advisories/28145
Vendor Advisory
http://secunia.com/advisories/28205
Vendor Advisory
http://secunia.com/advisories/28218
Vendor Advisory
http://www.securityfocus.com/bid/27025
Exploit
http://www.securitytracker.com/id?1019147
http://www.vupen.com/english/advisories/2007/4310
http://marc.info/?l=full-disclosure&m=119863639428564&w=2
Exploit
http://osvdb.org/39901
http://secunia.com/advisories/28145
Vendor Advisory
http://secunia.com/advisories/28205
Vendor Advisory
http://secunia.com/advisories/28218
Vendor Advisory
http://www.securityfocus.com/bid/27025
Exploit
http://www.securitytracker.com/id?1019147
http://www.vupen.com/english/advisories/2007/4310

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:groove:virtual_office:*:*:*:*:*:*:*:*

cpe:2.3:a:hp:loadrunner:*:*:*:*:*:*:*:*

cpe:2.3:a:persits:xupload:2.1.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.65752

Средний

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-jh8v-3fp9-w3r3

github

почти 4 года назад