CVE-2008-4385

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar.

• CWE-94

• http://secunia.com/advisories/32236Vendor Advisory
• http://www.kb.cert.org/vuls/id/166651Third Party Advisory, US Government Resource
• http://www.sec-consult.com/files/20081016-0_sysreqlab.txt
• http://www.securityfocus.com/archive/1/497400
• http://www.securityfocus.com/bid/31752
• http://www.systemrequirementslab.com/bulletins/security_bulletin_1.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45873
• http://secunia.com/advisories/32236Vendor Advisory
• http://www.kb.cert.org/vuls/id/166651Third Party Advisory, US Government Resource
• http://www.sec-consult.com/files/20081016-0_sysreqlab.txt
• http://www.securityfocus.com/archive/1/497400
• http://www.securityfocus.com/bid/31752
• http://www.systemrequirementslab.com/bulletins/security_bulletin_1.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45873

Published

Oct 14, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-4379Cross-site scripting (XSS) vulnerability in report.php in Mr…
• CVE-2008-4380The web interface in Samsung DVR SHR2040 allows remote attac…
• CVE-2008-4381Microsoft Internet Explorer 7 allows remote attackers to cau…
• CVE-2008-4382Konqueror in KDE 3.5.9 allows remote attackers to cause a de…
• CVE-2008-4383Stack-based buffer overflow in the Agranet-Emweb embedded ma…
• CVE-2008-4384Multiple stack-based buffer overflows in MGI Software LPView…
• CVE-2008-4387Unspecified vulnerability in the Simba MDrmSap ActiveX contr…
• CVE-2008-4388The LaunchObj ActiveX control before 5.2.2.865 in launcher.d…
• CVE-2008-4389Symantec AppStream 5.2.x and Symantec Workspace Streaming (S…
• CVE-2008-4390The Cisco Linksys WVC54GC wireless video camera before firmw…7.5
• CVE-2008-4391Stack-based buffer overflow in the SetSource method in the N…
• CVE-2008-4392dnscache in Daniel J. Bernstein djbdns 1.05 does not prevent…