CVE-2007-1819
HP Mercury Quality Center 9.0 - Stack-Based Buffer Overflow via SPIDERLib.Loader ActiveX ProgColor Property
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-1819.
PoCs published by Metasploit, ri0t, including Metasploit module exploits/windows/browser/hpmqc_progcolor.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack-based buffer overflow in the HP Mercury Quality Center ActiveX control (Spider90.ocx) via the 'ProgColor' property. It delivers a payload through a malicious HTML page with embedded JavaScript to achieve remote code execution.
Description
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.
Exploits (3)
This is a Metasploit module exploiting a stack-based buffer overflow in the HP Mercury Quality Center ActiveX control (Spider90.ocx) via the 'ProgColor' property. It delivers a payload through a malicious HTML page with embedded JavaScript to achieve remote code execution.
This exploit targets a buffer overflow vulnerability in Mercury Quality Center's Spider90.ocx ActiveX control via the ProgColor parameter. It uses a combination of JavaScript heap spraying and shellcode execution to achieve remote code execution.
This Metasploit module exploits a stack-based buffer overflow in the HP Mercury Quality Center ActiveX control (Spider90.ocx) via the 'ProgColor' property. It delivers a malicious HTML page with JavaScript that triggers the overflow, leading to arbitrary code execution.