CVE-2007-1819 Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows...
HighCVSS 9.3
EPSS 40.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc mercury quality center | = 8.2-sp1 | No fix listed |
| HP Inc mercury quality center | = 9.0 | No fix listed |
References
- SSRT071312 vendor-advisory
- 20070402 Hewlett-Packard Mercury Quality Center ActiveX Control ProgColor Buffer Overflow Vulnerability third-party-advisory
- 24692 third-party-advisory
- 1017835 vdb-entry
- webnotes.merc-int.com
- webnotes.merc-int.com
- VU#589097 third-party-advisory us-government-resource
- 23239 vdb-entry
- ADV-2007-1185 vdb-entry vendor-advisory
- hp-mercury-quality-progcolor-bo(33353) vdb-entry