CVE-2007-5606 Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary cod...
HighCVSS 10.0
EPSS 12.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc instant support | <= 1.0.0.23 | No fix listed |
References
- 30516 patch third-party-advisory vendor-advisory
- www.csis.dk
- VU#221123 third-party-advisory us-government-resource
- 29526 vdb-entry
- 29532 vdb-entry
- 1020165 vdb-entry
- ADV-2008-1740 vdb-entry
- HPSBMA02326 vendor-advisory
- hp-instantsupport-movefile-bo(42846) vdb-entry