Lucene search

K
cveCertccCVE-2007-5605
HistoryJun 04, 2008 - 8:32 p.m.

CVE-2007-5605

2008-06-0420:32:00
certcc
web.nvd.nist.gov
28
cve-2007-5605
hpisdatamanager.dll
activex control
buffer overflow
remote code execution
hp instant support

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.186

Percentile

96.2%

Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and CVE-2007-5607.

Affected configurations

Nvd
Node
hpinstant_supportRange1.0.0.23
VendorProductVersionCPE
hpinstant_support*cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.5

Confidence

Low

EPSS

0.186

Percentile

96.2%