back to your roots

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 1 of 1

Files

CSIS-RI-0003.pdf

Posted Jun 4, 2008

Authored by Dennis Rand | Site csis.dk

The HP Online Support Service ActiveX control, also known as HPISDataManager.dll, suffers from eight vulnerabilities. Five of them allow for arbitrary code execution. Proof of concept code included. It only took Hewlett Packard 207 days to fix this!

tags | exploit, arbitrary, vulnerability, code execution, activex, proof of concept

advisories | CVE-2008-0952, CVE-2007-5604, CVE-2007-5605, CVE-2007-5606, CVE-2007-5607, CVE-2007-5608, CVE-2008-0953, CVE-2007-5610

MD5 | 2c497d8ccd78eea87783b2ca6601ff3f

Download | Favorite | Comments (0)