CVE-2008-0437

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 58.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-01-23 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in the WebHPVCInstall.HPVirtualRooms14 ActiveX control in HPVirtualRooms14.dll 1.0.0.100, as used in the installation process for HP Virtual Rooms, allow remote attackers to execute arbitrary code via a long (1) AuthenticationURL, (2) PortalAPIURL, or (3) cabroot property value. NOTE: some of these details are obtained from third party information.

Affected products

HP Virtual Rooms: 1.0.0.100
Microsoft Activex: all versions

References

http://marc.info/?l=full-disclosure&m=120098751528333&w=2
http://secunia.com/advisories/28595
http://www.securityfocus.com/bid/27384
http://www.vupen.com/english/advisories/2008/0236
https://exchange.xforce.ibmcloud.com/vulnerabilities/39836
https://www.exploit-db.com/exploits/4959
http://marc.info/?l=full-disclosure&m=120098751528333&w=2
http://secunia.com/advisories/28595
http://www.securityfocus.com/bid/27384
http://www.vupen.com/english/advisories/2008/0236
https://exchange.xforce.ibmcloud.com/vulnerabilities/39836
https://www.exploit-db.com/exploits/4959

Get alerted when CVE-2008-0437 or the next vulnerability affects your stack