Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar.
References
Link | Resource |
---|---|
http://secunia.com/advisories/32236 | Vendor Advisory |
http://www.kb.cert.org/vuls/id/166651 | Third Party Advisory US Government Resource |
http://www.sec-consult.com/files/20081016-0_sysreqlab.txt | |
http://www.securityfocus.com/archive/1/497400 | |
http://www.securityfocus.com/bid/31752 | |
http://www.systemrequirementslab.com/bulletins/security_bulletin_1.html | Vendor Advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/45873 |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: certcc
Published: 2008-10-14T20:00:00
Updated: 2017-08-07T12:57:01
Reserved: 2008-10-02T00:00:00
Link: CVE-2008-4385
JSON object: View
NVD Information
Status : Modified
Published: 2008-10-14T21:10:35.643
Modified: 2017-08-08T01:32:36.390
Link: CVE-2008-4385
JSON object: View
Redhat Information
No data.
CWE