| HP Instant Support \'HPISDataManager.dll\' \'MoveFile\' ActiveX Control Buffer Overflow Vulnerability |
|
Vulnerable:
|
HP Instant Support 1.0 22
|
|
Not Vulnerable:
|
HP Instant Support 1.0 24
|
|
Description:
|
HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.
An attacker can exploit this issue to execute arbitrary code in the context of an application using the ActiveX control (typically Internet Explorer). Failed attacks will likely cause denial-of-service conditions.
HP Instant Support 1.0.0.22 and earlier versions are affected.
This issue was originally described in BID 29526 (HP Instant Support 'HPISDataManager.dll' ActiveX Control Unspecified Code Execution Vulnerabilities). Due to the availability of new information, this issue is being assigned a new individual BID.
|
| Exploit:
|
To exploit this issue, an attacker must entice an unsuspecting user to view a malicious web document. The following proof-of-concept is available: |
|
Solution:
|
The vendor released fixes to address this issue. Please see the references for more information.
|
|
References:
|
|
Subscribe to this comment's feed
Show/Hide comments
Show/Hide comment form