CVEブラウザに戻る

CVE-2007-5605

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.1780%

EPSS Percentile2.32th

Published2008年6月4日

Last Modified2026年4月23日

Vulnerability Description

Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and CVE-2007-5607.

Affected Platforms (CPE)

📦

Hp

Instant Support

<= 1.0.0.23

References & Advisories

🔗 http://secunia.com/advisories/30516

🔗 http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf

🔗 http://www.kb.cert.org/vuls/id/558163

🔗 http://www.securityfocus.com/bid/29526

🔗 http://www.securityfocus.com/bid/29531

🔗 http://www.securitytracker.com/id?1020165

🔗 http://www.vupen.com/english/advisories/2008/1740/references

🔗 http://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264

関連する脆弱性情報

CVE-2007-561010.0

The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support befor...

CVE-2008-095310.0

The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0....

CVE-2007-560610.0

Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Su...

CVE-2007-56089.3

The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1....