Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

Hummingbird HostExplorer ActiveX Control BOF Vulnerability

Information

Severity

Severity

Medium

Family

Family

Denial of Service

CVSSv2 Base

CVSSv2 Base

6.8

CVSSv2 Vector

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Solution Type

Solution Type

Vendor Patch

Created

Created

15 years ago

Modified

Modified

5 years ago

Summary

This host has Hummingbird HostExplorer ActiveX Control installed and is prone to stack based buffer overflow vulnerability.

Insight

Insight

The flaw is due to error in Hummingbird.XWebHostCtrl.1 ActiveX control in hclxweb.dll file when handling the 'PlainTextPassword' function, which can be exploited by assigning an overly long string.

Affected Software

Affected Software

Hummingbird HostExplorer versions prior to 2008 on Windows (all)

Solution

Solution

Update to HostExplorer 2008.

Common Vulnerabilities and Exposures (CVE)