CVE-2008-4385
- State
- Published
- Severity
- Not scored
- Published
- Oct 14, 2008
- Updated
- Aug 7, 2024
- Reserved
- Oct 2, 2008
Description
Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 32236third-party-advisory
- http://www.systemrequirementslab.com/bulletins/security_bulletin_1.html
- http://www.sec-consult.com/files/20081016-0_sysreqlab.txt
- 31752vdb-entry
- VU#166651third-party-advisory
- 20081016 SEC Consult SA-20081016-0 :: Remote command execution in InstantExpert Analysismailing-list
- srl-activex-javaapplet-code-execution(45873)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.