CVE-2007-5607 Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitra...
HighCVSS 7.5
EPSS 12.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5606.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc instant support | <= 1.0.0.23 | No fix listed |
| HP Inc instant support | = 1.0.0.22 | No fix listed |
References
- 30516 third-party-advisory vendor-advisory
- www.csis.dk
- VU#526131 third-party-advisory us-government-resource
- 29526 vdb-entry
- 29534 vdb-entry
- 1020165 vdb-entry
- ADV-2008-1740 vdb-entry
- HPSBMA02326 vendor-advisory
- hp-instantsupport-registrystring-bo(42848) vdb-entry