|
|
CVE Reference: CVE-2008-4728 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-4728 |
|
|
Description: Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/45961 SAID Secunia Advisory: SA32337 MISC http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html MILW0RM http://www.milw0rm.com/exploits/6776 http://www.milw0rm.com/exploits/6774 http://www.milw0rm.com/exploits/6773 BID 31799 |
|
| Return to the previous page. |
