CVE-2008-4385

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote...

9.3 HighPublic exploit

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote attackers to force the download and execution of arbitrary programs via by specifiying a malicious website argument to the Init method in (1) a certain ActiveX control (sysreqlab2.cab, sysreqlab.dll, sysreqlabsli.dll, or sysreqlab2.dll) and (2) a certain Java applet in RLApplet.class in sysreqlab2.jar or sysreqlab.jar.

Exploit likelihood

37.7%Down 44.3 points since Feb 4, 2022

What each source reports

NVD Score used 9.3

Record: CVE-2008-4385
CVSS 2.0: 9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness: CWE-94
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-4385
Updated: 2026-11-02

EUVDEUVD-2008-4366 No score

Record: EUVD-2008-4366
Updated: 2026-11-03

GitHub AdvisoriesGHSA-qg22-qxjf-9f4f No score

Husdawg, LLC Systems Requirements Lab 3, as used by Instant Expert Analysis, allows remote...

Record: GHSA-qg22-qxjf-9f4f
Weakness: CWE-94
Updated: 2026-11-02

Affected products

systemrequirementslab system requirements lab

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Husdawg_ LLC. System Requirements Lab - ActiveX Unsafe Method (Metasploit)	2010-09-20
Metasploit	Husdawg, LLC. System Requirements Lab ActiveX Unsafe Method	2008-10-16

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-4385 is a high vulnerability (CVSS 9.3) in Systemrequirementslab System Requirements Lab, published October 14, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 37.7%, the 98th percentile. No source names a fixed version.