NVD

Id
58501  
Name
CVE-2007-6506  
Description
The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly (2) access arbitrary files via the LoadDataFromFile method.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-12-20  
Modified Date
2011-06-20  
Seq
2007-6506  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
300162 58501 CVE-2007-6506 http://blogs.zdnet.com/security/?p=768  View
300163 58501 CVE-2007-6506 http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9053818  View
300164 58501 CVE-2007-6506 http://it.slashdot.org/it/07/12/20/2327242.shtml  View
300165 58501 CVE-2007-6506 http://www.anspi.pl/~porkythepig/hp-issue/wyfukanyszynszyl.txt  View
300166 58501 CVE-2007-6506 4757  View
300167 58501 CVE-2007-6506 HPSBGN2301  View
300168 58501 CVE-2007-6506 HPSBGN02301  View
300169 58501 CVE-2007-6506 26950  View
300170 58501 CVE-2007-6506 1019133  View
300171 58501 CVE-2007-6506 ADV-2007-4271  View
300172 58501 CVE-2007-6506 hpsoftware-rulesengine-file-overwrite(39153)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56061 JVNDB-2007-004753 HP Software Update の RulesEngine.dll における任意のファイルを破損される脆弱性 HP Software Update の RulesEngine.dll の HPRulesEngine.ContentCollection.1 ActiveX コントロールには、以下の脆弱性が存在します。 CVE-2007-6506 29861 CVE-2007-6506 58501 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004753.html 2007-12-20 2012-09-25 View