CVE-2007-3554 Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check before 1.5.0.3 allows remote attackers to execute arbitrary code via a long argume...
HighCVSS 7.6
EPSS 17.9%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check before 1.5.0.3 allows remote attackers to execute arbitrary code via a long argument to the queryHub function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc instant support | All versions | No fix listed |
References
- SSRT071404 vendor-advisory
- 37832 vdb-entry
- 25918 patch third-party-advisory vendor-advisory
- 20070703 Buffer overflow in HP Instant Support Driver Check (SDD) ActiveX control mailing-list
- 24730 exploit vdb-entry
- 1018331 vdb-entry
- www.shinnai.altervista.org patch vendor-advisory
- ADV-2007-2413 vdb-entry
- hp-instantsupport-drivercheck-bo(35228) vdb-entry