Vulnerability Bulletins |
Ejecución de código remoto en Mercury Quality Center ActiveX |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto sin cuenta a un servicio estandar |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software | Mercury Quality Center |
Description |
|
|
Se ha encontrado una vulnerabilidad en Mercury Quality Center ActiveX control. La vulnerabilidad reside en un error no especificado. Un atacante remoto podría ejecutar código arbitrario mediante un cliente Windows ejecutando el control de ActiveX. |
|
Solution |
|
|
Actualización de software Hewlett-Packard (HPSBUX02186) Mercury Quality Center 8.2 Sp1 / Patch 32 http://webnotes.merc-int.com/patches.nsf/c4d68388a23535dc422567d0004bbae2/7a0f7f0efc7905fdc225729f004cf387?OpenDocument Mercury Quality Center 9.0 / Patch 12.1 http://webnotes.merc-int.com/patches.nsf/c4d68388a23535dc422567d0004bbae2/cf109e434c7765eac22572a4006c6e94?OpenDocument |
|
Standar resources |
|
| Property | Value |
| CVE | |
| BID | |
Other resources |
|
|
HP SECURITY BULLETIN (HPSBGN02199) http://www5.itrc.hp.com/service/cki/docDisplay.do?docId=c00876579 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2007-06-21 |