CVE:CVE-2008-4728
CNNVD:CNNVD-200810-532
Hummingbird Deployment Wizard允许用户基于web安装任何Hummingbird产品并自动连接到主机。
Hummingbird Deployment Wizard的DeployRun.DeploymentSetup.1(DeployRun.dll)ActiveX控件没有正确地验证对Run()、SetRegistryValueAsString()和PerformUpdateAsync()方式所传送的输出参数，如果用户访问了恶意网页的话，就可能执行任意命令或以当前登录用户的权限修改已有的注册表项。
solution:Upgrade hummingbird deployment_wizard to a higher version than 2008,and avoid the version 2008