Login Request a demo
Unscored severity · published Dec 27, 2007
CVE-2007-6530
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual…
–
CVSS
36.8%
EPSS
No
On KEV
Description
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function.
Exploitation
Is it being used?
Exploit prediction (EPSS)36.8% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LO
Loadrunner · HP
All versions, or not specified · source: NVD
VO
Virtual Office · Groove
All versions, or not specified · source: NVD
XU
Xupload · Persits
2.1.0.1 · source: NVD
Affected product
VO
Virtual Office
Groove
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6530
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6530
Exploit
http://marc.info/?l=full-disclosure&m=119863639428564&w=2
osvdb.org
http://osvdb.org/39901
Vendor Advisory
http://secunia.com/advisories/28145
Vendor Advisory
http://secunia.com/advisories/28205
Vendor Advisory
http://secunia.com/advisories/28218
Exploit
http://www.securityfocus.com/bid/27025
More from Virtual Office
–
CVE-2005-1675
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure…
–
CVE-2005-1676
Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before…
–
CVE-2005-1677
Unknown vulnerability in Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 allows remote attackers to bypass…
–
CVE-2005-1678
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 does not properly display file extensions on attached or embedded…