First published: Wed Jun 04 2008(Updated: )
Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607.
Credit: cret@cert.org
Affected Software | Affected Version | How to fix |
---|---|---|
HP Instant Support | <=1.0.0.23 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-5606 has a high severity rating due to its potential to allow remote code execution.
To mitigate CVE-2007-5606, users should update HP Instant Support to version 1.0.0.24 or later.
CVE-2007-5606 affects versions of HP Instant Support up to and including 1.0.0.23.
CVE-2007-5606 is classified as a buffer overflow vulnerability.
Yes, CVE-2007-5606 can be exploited remotely by attackers leveraging long arguments.