CVE-2007-6506
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 16%
The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly (2) access arbitrary files via the LoadDataFromFile method.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/4757⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://blogs.zdnet.com/security/?p=768http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9053818http://it.slashdot.org/it/07/12/20/2327242.shtmlhttp://secunia.com/advisories/28177https://exchange.xforce.ibmcloud.com/vulnerabilities/39153https://www.exploit-db.com/exploits/4757http://www.anspi.pl/~porkythepig/hp-issue/wyfukanyszynszyl.txthttp://www.securityfocus.com/archive/1/485451/100/0/threadedhttp://www.securityfocus.com/archive/1/485734/100/0/threadedhttp://www.securityfocus.com/bid/26950http://www.securitytracker.com/id?1019133http://www.vupen.com/english/advisories/2007/4271