CVE-2008-4728 Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary....
HighCVSS 9.3
EPSS 31.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hummingbird deployment wizard | = 2008 | No fix listed |
References
- 32337 third-party-advisory vendor-advisory
- 31799 vdb-entry
- www.shinnai.net exploit url-repurposed
- www.shinnai.net exploit url-repurposed
- www.shinnai.net exploit url-repurposed
- ADV-2008-2857 vdb-entry
- hummingbird-run-command-execution(45961) vdb-entry
- 6773 exploit
- 6774 exploit
- 6776 exploit