CVE-2010-1033

Name of the Vulnerable Software and Affected Versions HP Operations Manager versions 7.5, 8.10, 8.16

Description The issue is related to multiple stack-based buffer overflows in a certain Tetradyne ActiveX control. This could allow remote attackers to execute arbitrary code via a long string argument to the (1) LoadFile or (2) SaveFile method. The problem is associated with the srcvw32.dll and srcvw4.dll files.

Recommendations For HP Operations Manager versions 7.5, 8.10, 8.16, consider disabling the LoadFile and SaveFile methods as a temporary workaround until a patch is available. Restrict access to the srcvw32.dll and srcvw4.dll files to minimize the risk of exploitation.