CVE-2007-1819

2007-04-0223:19:00

CWE-119

mitre

web.nvd.nist.gov

cve-2007-1819

stack-based buffer overflow

spiderlib.loader

activex control

spider90.ocx

testdirector

mercury quality center

patch 12.1

patch 32

progcolor property

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.751

Percentile

98.2%

JSON

Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.

Affected configurations

Nvd

Node

hpmercury_quality_centerMatch8.2sp1

hpmercury_quality_centerMatch9.0

VendorProductVersionCPE
hpmercury_quality_center8.2cpe:2.3:a:hp:mercury_quality_center:8.2:sp1:*:*:*:*:*:*
hpmercury_quality_center9.0cpe:2.3:a:hp:mercury_quality_center:9.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hp	mercury_quality_center	8.2	cpe:2.3:a:hp:mercury_quality_center:8.2:sp1::::::
hp	mercury_quality_center	9.0	cpe:2.3:a:hp:mercury_quality_center:9.0:::::::*