CVE-2007-5607
published 2008-06-04CVE-2007-5607: Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24…
PriorityP345high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
12.81%
95.8th percentile
Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5606.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| hp | instant_support | <= 1.0.0.23 | — |
| hp | instant_support | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-f7cf-4vwj-vvw2: Buffer overflow in the RegistryString function in the HPISDataManagerLib
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-5607 [HIGH] CWE-94 GHSA-f7cf-4vwj-vvw2: Buffer overflow in the RegistryString function in the HPISDataManagerLib
Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5606.
GHSA
GHSA-f469-v24c-6rxv: Buffer overflow in the ExtractCab function in the HPISDataManagerLib
ghsa_unreviewed·2022-05-01·CVSS 9.3
CVE-2007-5604 [CRITICAL] CWE-94 GHSA-f469-v24c-6rxv: Buffer overflow in the ExtractCab function in the HPISDataManagerLib
Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5605, CVE-2007-5606, and CVE-2007-5607.
GHSA
GHSA-5f85-8p5w-q6v9: Buffer overflow in the MoveFile function in the HPISDataManagerLib
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-5606 [HIGH] GHSA-5f85-8p5w-q6v9: Buffer overflow in the MoveFile function in the HPISDataManagerLib
Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607.
GHSA
GHSA-r9rr-8ghm-9j5g: Buffer overflow in the GetFileTime function in the HPISDataManagerLib
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-5605 [HIGH] GHSA-r9rr-8ghm-9j5g: Buffer overflow in the GetFileTime function in the HPISDataManagerLib
Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and CVE-2007-5607.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/30516http://www.csis.dk/dk/forside/CSIS-RI-0003.pdfhttp://www.kb.cert.org/vuls/id/526131http://www.securityfocus.com/bid/29526http://www.securityfocus.com/bid/29534http://www.securitytracker.com/id?1020165http://www.vupen.com/english/advisories/2008/1740/referenceshttp://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264https://exchange.xforce.ibmcloud.com/vulnerabilities/42848http://secunia.com/advisories/30516http://www.csis.dk/dk/forside/CSIS-RI-0003.pdfhttp://www.kb.cert.org/vuls/id/526131http://www.securityfocus.com/bid/29526http://www.securityfocus.com/bid/29534http://www.securitytracker.com/id?1020165http://www.vupen.com/english/advisories/2008/1740/referenceshttp://www12.itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c01422264https://exchange.xforce.ibmcloud.com/vulnerabilities/42848
2008-06-04
Published