CVE-2007-5604

Related Files

HP Security Bulletin 2007-14.90

Posted Jun 4, 2008

Authored by Hewlett Packard | Site hp.com

HP Security Bulletin - Potential security vulnerabilities have been identified with ActiveX controls in HP Instant Support HPISDataManager.dll running on Microsoft Windows. The vulnerabilities could be remotely exploited to allow remote execution of arbitrary code.

tags | advisory, remote, arbitrary, vulnerability, activex

systems | windows

advisories | CVE-2008-0952, CVE-2007-5604, CVE-2007-5605, CVE-2007-5606, CVE-2007-5607, CVE-2007-5608, CVE-2008-0953, CVE-2007-5610

SHA-256 | 73ddf361e685590c43f24d81890634225ab60734e083fa4f407ee0bae1723f30

Download | Favorite | View

CSIS-RI-0003.pdf

Posted Jun 4, 2008

Authored by Dennis Rand | Site csis.dk

The HP Online Support Service ActiveX control, also known as HPISDataManager.dll, suffers from eight vulnerabilities. Five of them allow for arbitrary code execution. Proof of concept code included. It only took Hewlett Packard 207 days to fix this!

tags | exploit, arbitrary, vulnerability, code execution, activex, proof of concept

advisories | CVE-2008-0952, CVE-2007-5604, CVE-2007-5605, CVE-2007-5606, CVE-2007-5607, CVE-2007-5608, CVE-2008-0953, CVE-2007-5610

SHA-256 | 1b188660e4a25d66cc3fa31a4fc24596dfd706b01ebaa57dcf760e66e66ee2ef

Download | Favorite | View