CVE-2007-5608 The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary fil...
HighCVSS 9.3
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client machine via a URL in the first argument and a destination filename in the second argument, a different vulnerability than CVE-2008-0952 and CVE-2008-0953.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc instant support | <= 1.0.0.23 | No fix listed |
References
- 30516 third-party-advisory vendor-advisory
- www.csis.dk
- VU#949587 third-party-advisory us-government-resource
- 29526 vdb-entry
- 29530 vdb-entry
- 1020165 vdb-entry
- ADV-2008-1740 vdb-entry
- HPSBMA02326 vendor-advisory
- hp-instantsupport-downloadfile-file-download(42850) vdb-entry