CVE-2008-4729 Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a lon...
MediumCVSS 6.8
EPSS 6.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hummingbird exceed | <= 13.0 | No fix listed |
| hummingbird exceed | = 9.0 | No fix listed |
| hummingbird exceed | = 10.0 | No fix listed |
| hummingbird exceed | = 2006 | No fix listed |
| hummingbird exceed | = 2007 | No fix listed |
| hummingbird exceed powersuite | All versions | No fix listed |
References
- 32319 exploit third-party-advisory vendor-advisory
- 4505 third-party-advisory
- 31783 vdb-entry
- hummingbird-xweb-activex-hclxweb-bo(45941) vdb-entry
- 6761 exploit