CVE-2008-4385

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

37.68% chance of exploitation in the next 30 days, 98th percentile

Published

2008-10-14

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/systemrequiremen…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/16552

References

• CVE Record
• NVD entry

Related

• CVE-2008-4384
• CVE-2008-4388
• CVE-2008-4382
• CVE-2008-4393
• CVE-2008-4381
• CVE-2008-4397