[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250770

 
 

909

 
 

196157

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2007-6332Date: (C)2007-12-13   (M)2023-12-22


The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 9.3
Exploit Score: 8.6
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1019086
http://www.securityfocus.com/archive/1/484880/100/100/threaded
BID-26823
SECUNIA-28055
EXPLOIT-DB-4720
ADV-2007-4192
SSRT071502
hpinfo-hpinfo-information-disclosure(38994)
http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt

CPE    1
cpe:/a:hp:quick_launch_button

© SecPod Technologies