CVE-2007-1819

HP Mercury Quality Center - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16580
exploitdb WORKING POC VERIFIED
by ri0t · perlremotewindows
https://www.exploit-db.com/exploits/3661
metasploit WORKING POC NORMAL
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/hpmqc_progcolor.rb

Scores

EPSS 0.7767
EPSS Percentile 99.0%

Details

CWE
CWE-119
Status published
Products (2)
hp/mercury_quality_center 8.2 sp1
hp/mercury_quality_center 9.0
Published Apr 02, 2007
Tracked Since Feb 18, 2026