CVE-2007-6513 HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary re...
MediumCVSS 4.3
EPSS 2.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc esupportdiagnostics | = 1.0.11.0 | No fix listed |
References
- 20071219 HP eSupportDiagnostics hpediags.dll Information Disclosure mailing-list
- www.heise-security.co.uk
- 26967 vdb-entry
- hp-esupportdiagnostics-info-disclosure(39156) vdb-entry