Intrusion PreventionHummingbird.Deployment.Wizard.ActiveX.Control.Access
Description
This indicates an attack attempt to exploit vulnerabilities in Hummingbird Deployment Wizard.
The vulnerability is located in the "deployRun.dll" ActiveX control through misuse of the "Run", "SetRegistryValueAsString", and "PerformUpdateAsync" methods. It may allow remote attackers to execute arbitrary code in the context of the application using the affected ActiveX control.
Affected Products
Hummingbird Deployment Wizard 10.0.44
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Upgrade to the latest version, available from the web site. Do not accept IE pop-up windows asking to load this particular component from an unknown source.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 15984 |
| Created | Nov 18, 2008 |
| Updated | Jan 13, 2022 |
| Risk |
|
| CVE ID | CVE-2008-4728 |
| Exploit Prediction Score | 47.74% |
| Default Action | pass |
| Active | |
| Affected OS | Windows |
| Affected App | Other |