CVE-2007-6530

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 36.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-12-27 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function.

Affected products

Groove Virtual Office: all versions
HP Loadrunner: all versions
Persits Xupload: 2.1.0.1

References

http://marc.info/?l=full-disclosure&m=119863639428564&w=2
http://osvdb.org/39901
http://secunia.com/advisories/28145
http://secunia.com/advisories/28205
http://secunia.com/advisories/28218
http://www.securityfocus.com/bid/27025
http://www.securitytracker.com/id?1019147
http://www.vupen.com/english/advisories/2007/4310
http://marc.info/?l=full-disclosure&m=119863639428564&w=2
http://osvdb.org/39901
http://secunia.com/advisories/28145
http://secunia.com/advisories/28205

Get alerted when CVE-2007-6530 or the next vulnerability affects your stack