NVD

Id
4212  
Name
CVE-2008-4385  
Description
Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-14  
Modified Date
2008-12-05  
Seq
2008-4385  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26779 4212 CVE-2008-4385 VU#166651  View
26780 4212 CVE-2008-4385 http://www.sec-consult.com/files/20081016-0_sysreqlab.txt  View
26781 4212 CVE-2008-4385 20081016 SEC Consult SA-20081016-0 :: Remote command execution in InstantExpert Analysis  View
26782 4212 CVE-2008-4385 31752  View
26783 4212 CVE-2008-4385 http://www.systemrequirementslab.com/bulletins/security_bulletin_1.html  View
26784 4212 CVE-2008-4385 srl-activex-javaapplet-code-execution(45873)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50957 JVNDB-2008-006267 Instant Expert Analysis で使用されている LLC Systems Requirements Lab における強制的にダウンロードされる脆弱性 Instant Expert Analysis で使用されている LLC Systems Requirements Lab、Husdawg には、強制的にダウンロードされる、および任意のプログラムを実行される脆弱性が存在します。 CVE-2008-4385 34498 CVE-2008-4385 4212 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006267.html 2008-10-14 2012-12-20 View