9.3crit
CVE-2007-6530in critical feed3 exploits
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by…
Published 18 y ago · modified 4 mo ago · JSON
CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
36.8%
percentile 99%
Public exploits
3
Metasploit · Exploit-DB
Summary
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function.
Exploit prediction (EPSS)
36.83% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.
Exploits and detections
- Metasploit exploit/windows/browser/hp_loadrunner_addfolder HP LoadRunner 9.0 ActiveX AddFolder Buffer Overflow · metasploit exploit, good rank · 2007-12-25
- EDB-4806 Persits Software XUpload Control - 'AddFolder()' Remote Buffer Overflow · remote · 2007-12-28
- EDB-16588 HP LoadRunner 9.0 - ActiveX AddFolder Buffer Overflow (Metasploit) · remote · 2010-05-09
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
- marc.info /?l=full-disclosure&m=119863639428564&w=2 · mailing-list, x_refsource_FULLDISC, x_transferred
- vupen.com /english/advisories/2007/4310 · vdb-entry, x_refsource_VUPEN, x_transferred
- secunia.com /advisories/28205 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- securitytracker.com /id?1019147 · vdb-entry, x_refsource_SECTRACK, x_transferred
- secunia.com /advisories/28145 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- secunia.com /advisories/28218 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- osvdb.org /39901 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityfocus.com /bid/27025 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2007-6530
- NVD: CVE-2007-6530
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.