Unscored severity · published Jan 23, 2008
CVE-2008-0437
Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow…
–
CVSS
58.1%
EPSS
No
On KEV
Description
Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)58.1% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Activex · Microsoft
All versions, or not specified · source: NVD
VR
Virtual Rooms · HP
1.0.0.100 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0437
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0437
marc.info
http://marc.info/?l=full-disclosure&m=120098751528333&w=2
Vendor Advisory
http://secunia.com/advisories/28595
www.securityfocus.com
http://www.securityfocus.com/bid/27384
www.vupen.com
http://www.vupen.com/english/advisories/2008/0236
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/39836
www.exploit-db.com
https://www.exploit-db.com/exploits/4959
More from Virtual Rooms
–
CVE-2009-0208
Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1, when running on Windows, allows remote attackers to execute arbitrary code via unknown vectors
–
CVE-2008-0213
Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors