CVE-2007-1819

CRITICAL 9.3CVE-2007-1819 · Published 02/04/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
mercury quality center hp	`= 8.2= 9.0`	No fix yet

Description

Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp
labs.idefense.com/intelligence/vulnerabilities/display.php
secunia.com/advisories/24692
securitytracker.com/id
webnotes.merc-int.com/patches.nsf/c4d68388a23535dc422567d0004bbae2/7a0f7f0efc7905fdc225729f004cf387
webnotes.merc-int.com/patches.nsf/c4d68388a23535dc422567d0004bbae2/cf109e434c7765eac22572a4006c6e94
kb.cert.org/vuls/id/589097 · US Government Resource
securityfocus.com/bid/23239
vupen.com/english/advisories/2007/1185 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/33353

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free