Lucene search

[email protected]CVE-2008-4729

HistoryOct 24, 2008 - 12:00 a.m.

CVE-2008-4729

2008-10-2400:00:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-4729

stack-based buffer overflow

hummingbird

xwebhostctrl

activex control

hclxweb.dll

remote code execution

nvd

8.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.177 Low

EPSS

Percentile

96.1%

JSON

Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0.

CPENameOperatorVersion
hummingbird:exceedhummingbird exceedeq2007
hummingbird:exceedhummingbird exceedeq9.0
hummingbird:exceed_powersuitehummingbird exceed powersuiteeq*
hummingbird:exceedhummingbird exceedeq2006
hummingbird:exceedhummingbird exceedeq10.0
hummingbird:exceedhummingbird exceedle13.0

CPE	Name	Operator	Version
hummingbird:exceed	hummingbird exceed	eq	2007
hummingbird:exceed	hummingbird exceed	eq	9.0
hummingbird:exceed_powersuite	hummingbird exceed powersuite	eq	*
hummingbird:exceed	hummingbird exceed	eq	2006
hummingbird:exceed	hummingbird exceed	eq	10.0
hummingbird:exceed	hummingbird exceed	le	13.0

References

secunia.com/advisories/32319

securityreason.com/securityalert/4505

www.securityfocus.com/bid/31783

exchange.xforce.ibmcloud.com/vulnerabilities/45941

www.exploit-db.com/exploits/6761

8.5 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.177 Low

EPSS

Percentile

96.1%

JSON

Related for CVE-2008-4729

prion1 kaspersky1 openvas2