CVE-2007-6331

EPSS 30.1%

Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4720unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 http://secunia.com/advisories/28055 http://securitytracker.com/id?1019086 https://exchange.xforce.ibmcloud.com/vulnerabilities/38991 https://www.exploit-db.com/exploits/4720 http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt http://www.securityfocus.com/archive/1/484880/100/100/threaded http://www.securityfocus.com/bid/26823 http://www.vupen.com/english/advisories/2007/4192