CVE-2008-0437 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 58.1% (pctl 99)
Patch early
A public exploit exists.
Description
Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 58.08% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-01-23 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| hp | virtual rooms |
| microsoft | activex |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | HP Virtual Rooms WebHPVCInstall Control - Remote Buffer Overflow | 2008-01-22 |
References
- http://marc.info/?l=full-disclosure&m=120098751528333&w=2
- http://secunia.com/advisories/28595
- http://www.securityfocus.com/bid/27384
- http://www.vupen.com/english/advisories/2008/0236
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39836
- https://www.exploit-db.com/exploits/4959
- http://marc.info/?l=full-disclosure&m=120098751528333&w=2
- http://secunia.com/advisories/28595
- http://www.securityfocus.com/bid/27384
- http://www.vupen.com/english/advisories/2008/0236
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39836
- https://www.exploit-db.com/exploits/4959
→ the Explorer · watch your stack · NVD