Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.exploit-db.com/exploits/6773 | exploit x_refsource_EXPLOIT-DB |
| http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html | x_refsource_MISC |
| https://www.exploit-db.com/exploits/6774 | exploit x_refsource_EXPLOIT-DB |
| http://www.securityfocus.com/bid/31799 | vdb-entry x_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45961 | vdb-entry x_refsource_XF |
| https://www.exploit-db.com/exploits/6776 | exploit x_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2008/2857 | vdb-entry x_refsource_VUPEN |
| http://secunia.com/advisories/32337 | third-party-advisory x_refsource_SECUNIA |
| http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html | x_refsource_MISC |
| http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html | x_refsource_MISC |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://www.exploit-db.com/exploits/6773 | exploit x_refsource_EXPLOIT-DB x_transferred |
| http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html | x_refsource_MISC x_transferred |
| https://www.exploit-db.com/exploits/6774 | exploit x_refsource_EXPLOIT-DB x_transferred |
| http://www.securityfocus.com/bid/31799 | vdb-entry x_refsource_BID x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45961 | vdb-entry x_refsource_XF x_transferred |
| https://www.exploit-db.com/exploits/6776 | exploit x_refsource_EXPLOIT-DB x_transferred |
| http://www.vupen.com/english/advisories/2008/2857 | vdb-entry x_refsource_VUPEN x_transferred |
| http://secunia.com/advisories/32337 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html | x_refsource_MISC x_transferred |
| http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html | x_refsource_MISC x_transferred |