Description
Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and CVE-2007-5607.
References
- 30516 third-party-advisory
- HPSBMA02326 vendor-advisory
- 29526 vdb-entry
- hp-instantsupport-getfiletime-bo(42845) vdb-entry
- ADV-2008-1740 vdb-entry
- http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf
- 29531 vdb-entry
- VU#558163 third-party-advisory
- 1020165 vdb-entry