CVE-2008-0437

Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.

Link	Resource
http://marc.info/?l=full-disclosure&m=120098751528333&w=2
http://www.securityfocus.com/bid/27384
http://secunia.com/advisories/28595	Vendor Advisory
http://www.vupen.com/english/advisories/2008/0236
https://exchange.xforce.ibmcloud.com/vulnerabilities/39836
https://www.exploit-db.com/exploits/4959

Configuration 1

cpe:2.3:a:hp:virtual_rooms:1.0.0.100:*:*:*:*:*:*:* cpe:2.3:a:microsoft:activex:*:*:*:*:*:*:*:*

---

Published : 2008-01-23 10:00

Updated : 2017-09-29 01:30

---

NVD link : CVE-2008-0437

Mitre link : CVE-2008-0437

Activex

Microsoft

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer