CVE-2007-1819

Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

39.73% chance of exploitation in the next 30 days, 99th percentile

Published

2007-04-02

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/hpmqc_progcolor.…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16580
• https://www.exploit-db.com/exploits/3661

References

• CVE Record
• NVD entry

Related

• CVE-2007-1818
• CVE-2007-1825
• CVE-2007-1817
• CVE-2007-1835
• CVE-2007-1816
• CVE-2007-1837