CVE

Id
29688  
CVE No.
CVE-2007-6331  
Status
Candidate  
Description
Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista.  
Phase
Assigned (20071213)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
312975 29688 CVE-2007-6331 BUGTRAQ:20071211 HP notebooks remote code execution vulnerability (multiple series)  View
312976 29688 CVE-2007-6331 URL:http://www.securityfocus.com/archive/1/archive/1/484880/100/100/threaded  View
312977 29688 CVE-2007-6331 MILW0RM:4720  View
312978 29688 CVE-2007-6331 URL:http://www.milw0rm.com/exploits/4720  View
312979 29688 CVE-2007-6331 MISC:http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt  View
312980 29688 CVE-2007-6331 HP:HPSBGN02298  View
312981 29688 CVE-2007-6331 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486  View
312982 29688 CVE-2007-6331 HP:SSRT071502  View
312983 29688 CVE-2007-6331 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486  View
312984 29688 CVE-2007-6331 BID:26823  View
312985 29688 CVE-2007-6331 URL:http://www.securityfocus.com/bid/26823  View
312986 29688 CVE-2007-6331 VUPEN:ADV-2007-4192  View
312987 29688 CVE-2007-6331 URL:http://www.vupen.com/english/advisories/2007/4192  View
312988 29688 CVE-2007-6331 SECTRACK:1019086  View
312989 29688 CVE-2007-6331 URL:http://securitytracker.com/id?1019086  View
312990 29688 CVE-2007-6331 SECUNIA:28055  View
312991 29688 CVE-2007-6331 URL:http://secunia.com/advisories/28055  View
312992 29688 CVE-2007-6331 XF:hpinfo-hpinfo-command-execution(38991)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56019 JVNDB-2007-004711 HP QLBCTRL.exe の hpinfocenter.exe における任意のレジストリ値を読まれる脆弱性 HP Quick Launch Button (QLBCTRL.exe) の HP Info Center (hpinfocenter.exe) に付属される HPInfoDLL.dll の HPInfoDLL.HPInfo.1 ActiveX コントロールには、任意のレジストリ値を読まれる脆弱性が存在します。 CVE-2007-6333 29688 5.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004711.html  View