Back to CVE Browser

CVE-2008-4385

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.1710%

EPSS Percentile32.59th

PublishedOct 14, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar.

Affected Platforms (CPE)

📦

Systemrequirementslab

System Requirements Lab

= 3

References & Advisories

🔗 http://secunia.com/advisories/32236

🔗 http://www.kb.cert.org/vuls/id/166651

🔗 http://www.sec-consult.com/files/20081016-0_sysreqlab.txt

🔗 http://www.securityfocus.com/archive/1/497400

🔗 http://www.securityfocus.com/bid/31752

🔗 http://www.systemrequirementslab.com/bulletins/security_bulletin_1.html

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/45873

🔗 http://secunia.com/advisories/32236

Related Vulnerabilities

CVE-2020-289355.5

NLnet Labs Unbound, up to and including version 1.12.0, and NLnet Labs NSD, up to and including version 4.3.3, contain a local vul...

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...

Allocation of Resources Without Limits or Throttling vulnerability in elixir-grpc grpc allows unauthenticated attackers to exhaust...

Deserialization of Untrusted Data and Allocation of Resources Without Limits or Throttling vulnerabilities in elixir-grpc grpc all...