CVE-2007-6530 Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remot...
HighCVSS 9.3
EPSS 36.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| groove virtual office | All versions | No fix listed |
| HP Inc loadrunner | All versions | No fix listed |
| persits xupload | = 2.1.0.1 | No fix listed |
References
- 20071225 Persits Software XUpload.ocx Buffer Overflow exploit mailing-list
- 39901 vdb-entry
- 28145 third-party-advisory vendor-advisory
- 28205 third-party-advisory vendor-advisory
- 28218 third-party-advisory vendor-advisory
- 27025 exploit vdb-entry
- 1019147 vdb-entry
- ADV-2007-4310 vdb-entry