| RETIRED: HP Instant Support \'HPISDataManager.dll\' ActiveX Control Unspecified Code Execution |
|
Vulnerable:
|
HP Instant Support 1.0 22
|
|
Not Vulnerable:
|
HP Instant Support 1.0 24
|
|
Description:
|
HP Instant Support 'HPISDataManager.dll' ActiveX control is prone to multiple unspecified vulnerabilities that allow remote attackers to execute arbitrary code in the context of the application using the ActiveX control (typically Internet Explorer).
Failed exploit attempts likely result in denial-of-service conditions.
HP Instant Support 1.0.0.22 and earlier versions are affected.
NOTE: This BID is being retired; the following individual records have been created to better document the issues:
29529 HP Instant Support 'HPISDataManager.dll' 'ExtractCab' ActiveX Control Buffer Overflow Vulnerability
29530 HP Instant Support ActiveX Control in 'HPISDataManager.dll' Arbitrary File Download Vulnerability
29531 HP Instant Support 'HPISDataManager.dll' 'GetFileTime' ActiveX Control Buffer Overflow Vulnerability
29532 HP Instant Support 'HPISDataManager.dll' 'MoveFile' ActiveX Control Buffer Overflow Vulnerability
29533 HP Instant Support 'HPISDataManager.dll' 'StartApp' ActiveX Control Insecure Method Vulnerability
29534 HP Instant Support 'HPISDataManager.dll' 'RegistryString' Buffer Overflow Vulnerability
29535 HP Instant Support 'HPISDataManager.dll' ActiveX Control Arbitrary File Creation Vulnerability
29536 HP Instant Support 'HPISDataManager.dll' ActiveX Control Arbitrary File Delete Vulnerability
|
| Exploit:
|
Currently SecuMania is not aware of any exploits for this issue.
If you are aware of more recent information, please mail us at: vul[at]SecuMania.org. |
|
Solution:
|
The vendor released fixes to address these issues. Please see the references for more information.
|
Subscribe to this comment's feed
Show/Hide comments
Show/Hide comment form