CVE-2007-1819 in the critical feed json
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Cent…
published 2007-04-02 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-1813
- cvss
- 9.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 40.0%
- EPSS 40.0% chance of exploitation in 30 days, percentile 98%
- public exploits
- 3
- Metasploit, Exploit-DB
Summary
Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.
Timeline
- Published
- First public exploit (Metasploit exploit/windows/browser/hpmqc_progcolor)
Exploit prediction
39.97% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/windows/browser/hpmqc_progcolor HP Mercury Quality Center ActiveX Control ProgColor Buffer Overflow metasploit exploit, normal rank, 2007-04-04
- EDB-16580 HP Mercury Quality Center - ActiveX Control ProgColor Buffer Overflow (Metasploit) remote, 2010-04-30
- EDB-3661 HP Mercury Quality Center - Spider90.ocx ProgColor Overflow remote, 2007-04-04
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 9.3 | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
-
h20000.www2.hp.com
/bizsupport/TechSupport/Document.jsp?objectID=c00901872
vendor-advisory
-
vupen.com
/english/advisories/2007/1185
vdb-entry, vendor-advisory
-
securitytracker.com
/id?1017835
vdb-entry
- webnotes.merc-int.com /patches.nsf/c4d68388a23535dc422567d0004bbae2/7a0f7f0efc7905fdc225729f004cf387?OpenDocument
-
secunia.com
/advisories/24692
third-party-advisory
-
kb.cert.org
/vuls/id/589097
third-party-advisory, us-government-resource
-
exchange.xforce.ibmcloud.com
/vulnerabilities/33353
vdb-entry
-
securityfocus.com
/bid/23239
vdb-entry
- webnotes.merc-int.com /patches.nsf/c4d68388a23535dc422567d0004bbae2/cf109e434c7765eac22572a4006c6e94?OpenDocument
-
labs.idefense.com
/intelligence/vulnerabilities/display.php?id=497
third-party-advisory
Sources
- CVE List CVE-2007-1819
- NVD CVE-2007-1819
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.