[security bulletin] HPSBMU02967 rev.2 - HP Unified Functional Testing Running on Windows, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iNote: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04122007 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04122007 Version: 2 HPSBMU02967 rev...

HP Unified Functional Testing < 12.0 Remote Code Execution (HPSBMU02967)

The remote Windows host has a version of HP Unified Functional Testing prior to 12.0. It is, therefore, affected by an unspecified remote code execution vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73094; scriptversion"1.5"; scriptcvsdate"Date:...

CVE-2013-6210

HP Unified Functional Testing (UFT) versions prior to 12.0 are affected by a remote code execution vulnerability (CVE-2013-6210). The root cause is a flaw in the ExGrid SaveXML path that relies on the Exontrol.Grid ActiveX control, where cell contents are not validated before being written to a f...