Description
Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607.
References
- 30516 third-party-advisory
- HPSBMA02326 vendor-advisory
- 29526 vdb-entry
- VU#221123 third-party-advisory
- ADV-2008-1740 vdb-entry
- http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf
- hp-instantsupport-movefile-bo(42846) vdb-entry
- 29532 vdb-entry
- 1020165 vdb-entry