Buffer overflow in Hp Mercury Quality Center
CVE-2007-1819
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.
Vulnerability class: Buffer Overflow
EPSS: 0.397 (98.5th percentile) — read the EPSS interpretation.
Affected products
- Hp Mercury_quality_center — versions 8.2, 9.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_HP, vendor-advisory)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
Frequently asked questions
- What is CVE-2007-1819?
- CVE-2007-1819 is a vulnerability in Hp Mercury Quality Center, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-04-02.
- Is CVE-2007-1819 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.