CVE-2007-5604
Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 11.7%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5605, CVE-2007-5606, and CVE-2007-5607.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 11.67% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- hp/instant support
- Source
- cret@cert.org
References
- http://secunia.com/advisories/30516Vendor Advisory
- http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf
- http://www.kb.cert.org/vuls/id/754403US Government Resource
- http://www.securityfocus.com/bid/29526
- http://www.securitytracker.com/id?1020165
- http://www.vupen.com/english/advisories/2008/1740/references
- http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42844
- http://secunia.com/advisories/30516Vendor Advisory
- http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf
- http://www.kb.cert.org/vuls/id/754403US Government Resource
- http://www.securityfocus.com/bid/29526
- http://www.securitytracker.com/id?1020165
- http://www.vupen.com/english/advisories/2008/1740/references
- http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42844
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.