CVE-2007-5606
Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 12.8%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 12.81% probability · 96th percentile
- CISA KEV
- Not listed
- Affected
- hp/instant support
- Source
- cret@cert.org
References
- http://secunia.com/advisories/30516Patch, Vendor Advisory
- http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf
- http://www.kb.cert.org/vuls/id/221123US Government Resource
- http://www.securityfocus.com/bid/29526
- http://www.securityfocus.com/bid/29532
- http://www.securitytracker.com/id?1020165
- http://www.vupen.com/english/advisories/2008/1740/references
- http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42846
- http://secunia.com/advisories/30516Patch, Vendor Advisory
- http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf
- http://www.kb.cert.org/vuls/id/221123US Government Resource
- http://www.securityfocus.com/bid/29526
- http://www.securityfocus.com/bid/29532
- http://www.securitytracker.com/id?1020165
- http://www.vupen.com/english/advisories/2008/1740/references
- http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42846
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.