漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hummingbird Deployment Wizard 'DeployRun.dll'多个不安全调用漏洞
Vulnerability Description
Hummingbird Deployment Wizard允许用户基于web安装任何Hummingbird产品并自动连接到主机。 Hummingbird Deployment Wizard的DeployRun.DeploymentSetup.1(DeployRun.dll)ActiveX控件没有正确地验证对Run()、SetRegistryValueAsString()和PerformUpdateAsync()方式所传送的输出参数,如果用户访问了恶意网页的话,就可能执行任意命令或以当前登录用户的权限修改已
CVSS Information
N/A
Vulnerability Type
N/A