CVE-2007-5604 Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary c...
HighCVSS 7.5
EPSS 11.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5605, CVE-2007-5606, and CVE-2007-5607.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc instant support | <= 1.0.0.23 | No fix listed |
| HP Inc instant support | = 1.0.0.22 | No fix listed |
References
- 30516 third-party-advisory vendor-advisory
- www.csis.dk
- VU#754403 third-party-advisory us-government-resource
- 29526 vdb-entry
- 1020165 vdb-entry
- ADV-2008-1740 vdb-entry
- HPSBMA02326 vendor-advisory
- hp-instantsupport-extractcab-bo(42844) vdb-entry