PT-2007-7347 · Hewlett Packard · Hp Esupportdiagnostics Activex Control

Publicado 2007-12-21 · Atualizado 2017-08-08 · CVE-2007-6513

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions HP eSupportDiagnostics ActiveX control (hpediag.dll) version 1.0.11.0

Description The issue allows remote attackers to read arbitrary files via the ReadTextFile method or read arbitrary registry values via the ReadValue method.

Recommendations For HP eSupportDiagnostics ActiveX control (hpediag.dll) version 1.0.11.0, consider disabling the ReadTextFile and ReadValue methods to prevent exploitation until a patch is available.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-6513

Produtos afetados

Hp Esupportdiagnostics Activex Control

Referências · 6

• 🔥 https://exploit-db.com/exploits/30920 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6513 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39156 · Nota
• http://heise-security.co.uk/news/100934 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2007-12/0470.html · Nota
• http://securityfocus.com/bid/26967 · Nota