Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Hummingbird Deployment Wizard 'DeployRun.dll'多个不安全调用漏洞
Vulnerability Description
Hummingbird Deployment Wizard允许用户基于web安装任何Hummingbird产品并自动连接到主机。 Hummingbird Deployment Wizard的DeployRun.DeploymentSetup.1(DeployRun.dll)ActiveX控件没有正确地验证对Run()、SetRegistryValueAsString()和PerformUpdateAsync()方式所传送的输出参数，如果用户访问了恶意网页的话，就可能执行任意命令或以当前登录用户的权限修改已
CVSS Information
N/A
Vulnerability Type
N/A