medium6.8Public exploit code
CVE-2008-4729
Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote atta…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Hummingbird 13.0 - ActiveX Remote Buffer Overflow (PoC)2008-10-16 · dos · windows · Verified
Impact
Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hummingbird | Exceed | through 13.0 Versions 9.0, 10.0, 2006, 2007 |
| Hummingbird | Exceed Powersuite | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/32319
- http://securityreason.com/securityalert/4505
- http://www.securityfocus.com/bid/31783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45941
- https://www.exploit-db.com/exploits/6761
- http://secunia.com/advisories/32319
- http://securityreason.com/securityalert/4505
- http://www.securityfocus.com/bid/31783
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45941
- https://www.exploit-db.com/exploits/6761