CVE-2008-4728
Hummingbird Deployment Wizard 2008 - Unauthenticated Remote Code Execution via DeployRun ActiveX Methods
Title source: manualExploitation Summary
EIP tracks 3 public exploits for CVE-2008-4728. PoCs published by shinnai.
AI-analyzed exploit summary This exploit demonstrates a vulnerability in Hummingbird Deployment Wizard 2008 (DeployRun.dll) where the `SetRegistryValueAsString` method can be abused to create or modify registry values. The PoC uses VBScript to invoke the method via an ActiveX object, potentially allowing arbitrary registry manipulation.
Description
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders.
Exploits (3)
This exploit demonstrates a vulnerability in Hummingbird Deployment Wizard 2008 (DeployRun.dll) where the `SetRegistryValueAsString` method can be abused to create or modify registry values. The PoC uses VBScript to invoke the method via an ActiveX object, potentially allowing arbitrary registry manipulation.
This exploit leverages an unsafe ActiveX control (DeployRun.dll) in Hummingbird Deployment Wizard 2008 to execute arbitrary commands via the PerformUpdateAsync method. The PoC demonstrates execution of calc.exe but could be adapted to run any executable or download remote payloads.
This exploit leverages an unsafe ActiveX control (DeployRun.dll) in Hummingbird Deployment Wizard 2008 to execute arbitrary commands via the `Run` method. The PoC demonstrates command execution by launching `calc.exe` through `cmd.exe` when a button is clicked in a malicious HTML page.