CVE-2008-4385 EXPLOIT
9.3
HIGH · CVSS 2.0 · EPSS 37.7% (pctl 98)
Patch early
A public exploit exists.
Description
Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar.
Scoring
| CVSS | 9.3 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 37.68% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-94 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-10-14 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| systemrequirementslab | system requirements lab |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Husdawg_ LLC. System Requirements Lab - ActiveX Unsafe Method (Metasploit) | 2010-09-20 |
References
- http://secunia.com/advisories/32236
- http://www.kb.cert.org/vuls/id/166651
- http://www.sec-consult.com/files/20081016-0_sysreqlab.txt
- http://www.securityfocus.com/archive/1/497400
- http://www.securityfocus.com/bid/31752
- http://www.systemrequirementslab.com/bulletins/security_bulletin_1.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45873
- http://secunia.com/advisories/32236
- http://www.kb.cert.org/vuls/id/166651
- http://www.sec-consult.com/files/20081016-0_sysreqlab.txt
- http://www.securityfocus.com/archive/1/497400
- http://www.securityfocus.com/bid/31752
- http://www.systemrequirementslab.com/bulletins/security_bulletin_1.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45873
→ the Explorer · watch your stack · NVD