Vulnerability in N/a
CVE-2008-4385
Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a cert…
EPSS: 0.719 (98.8th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 32236 (x_refsource_SECUNIA, third-party-advisory)
- www.systemrequirementslab.com/bulletins/security_bulletin_1.html (x_refsource_CONFIRM)
- www.sec-consult.com/files/20081016-0_sysreqlab.txt (x_refsource_MISC)
- 31752 (vdb-entry, x_refsource_BID)
- VU#166651 (x_refsource_CERT-VN, third-party-advisory)
- 20081016 SEC Consult SA-20081016-0 :: Remote command execution in InstantExpert Analysis (mailing-list, x_refsource_BUGTRAQ)
- srl-activex-javaapplet-code-execution(45873) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2008-4385?
- CVE-2008-4385 is a vulnerability in N/a. Published 2008-10-14.
- Is CVE-2008-4385 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.