Back to Database
Status published
Critical
CVE-2007-6530
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software...
Vulnerability Description
Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by HP Mercury LoadRunner and Groove Virtual Office, allows remote attackers to execute arbitrary code via a long argument to the AddFolder function.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-6530
Credits & Attribution
No credits recorded in the NVD database.
References
- http://marc.info/?l=full-disclosure&m=119863639428564&w=2
- http://www.vupen.com/english/advisories/2007/4310
- http://secunia.com/advisories/28205
- http://www.securitytracker.com/id?1019147
- http://secunia.com/advisories/28145
- http://secunia.com/advisories/28218
- http://osvdb.org/39901
- http://www.securityfocus.com/bid/27025
More from groove
View All →CVE-2005-1678
Groove Virtual Office before 3.1 build 2338, before 3.1a build...
Low
2.6
CVE-2005-1677
Unknown vulnerability in Groove Virtual Office before 3.1 build 2338,...
High
7.5
CVE-2005-1676
Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in...
Medium
6.8
CVE-2005-1675
Groove Virtual Office before 3.1 build 2338, before 3.1a build...
Medium
4.6
Affected Vendor
groove
View all reports →Affected Software
virtual office, loadrunner, xupload
Vulnerable Versions:
2.1.0.1
Timeline
Official Publish:
December 27th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.