CVSS: 10.0EPSS: 4%CPEs: 2EXPL: 0CVE-2009-0208
https://notcve.org/view.php?id=CVE-2009-0208
Unspecified vulnerability in HP Virtual Rooms Client before 7.0.1, when running on Windows, allows remote attackers to execute arbitrary code via unknown vectors. Vulnerabilidad no especificada en HP Virtual Rooms Client anterior a v7.0.1, cuando se ejecuta en Windows, permite a atacantes remotos ejecutar código de su elección a través de vectores desconocidos. • http://marc.info/?l=bugtraq&m=123567121722181&w=2 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 7.5EPSS: 4%CPEs: 1EXPL: 0CVE-2008-0213
https://notcve.org/view.php?id=CVE-2008-0213
Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute arbitrary code via unknown vectors. Una vulnerabilidad no especificada en un determinado control ActiveX para HP Virtual Rooms (HPVR) versión 6 y anteriores, permite a los atacantes remotos ejecutar código arbitrario por medio de vectores desconocidos. • http://marc.info/?l=bugtraq&m=120231595903371&w=2 http://www.securitytracker.com/id?1019311 • CWE-94: Improper Control of Generation of Code ('Code Injection') •
CVSS: 10.0EPSS: 36%CPEs: 2EXPL: 1CVE-2008-0437 – HP Virtual Rooms WebHPVCInstall Control - Remote Buffer Overflow
https://notcve.org/view.php?id=CVE-2008-0437
Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information. Múltiples desbordamientos de búfer en el control ActiveX WebHPVCInstall.HPVirtualRooms14.dll 1.0.0.100, usado en el proceso de instalación de HP Virtual Rooms, permiten a atacantes remotos ejecutar código de su elección mediante un valor largo para las propiedades (1) AuthenticationURL, (2) PortalAPIURL, o (3) cabroot. NOTA: algunos de estos detalles se han obtenido de información de terceros. • https://www.exploit-db.com/exploits/4959 http://marc.info/?l=full-disclosure&m=120098751528333&w=2 http://secunia.com/advisories/28595 http://www.securityfocus.com/bid/27384 http://www.vupen.com/english/advisories/2008/0236 https://exchange.xforce.ibmcloud.com/vulnerabilities/39836 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •