CVE-2007-5605 Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary....
HighCVSS 9.3
EPSS 8.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and CVE-2007-5607.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc instant support | <= 1.0.0.23 | No fix listed |
References
- 30516 third-party-advisory vendor-advisory
- www.csis.dk
- VU#558163 third-party-advisory us-government-resource
- 29526 vdb-entry
- 29531 vdb-entry
- 1020165 vdb-entry
- ADV-2008-1740 vdb-entry
- HPSBMA02326 vendor-advisory
- hp-instantsupport-getfiletime-bo(42845) vdb-entry