Lucene search
HistoryMay 21, 2008 - 1:24 p.m.
CVE-2008-2390
hp
software
update
hpufunction.dll
cve-2008-2390
security vulnerability
code execution
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.888 High
EPSS
Percentile
98.7%
Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the first argument.
Affected configurations
Node
hpsoftware_updateMatch4.0.0.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| hp:software_update | hp software update | eq | 4.0.0.1 |
Related
kaspersky
kaspersky
KLA10192 ACE vulnerability in HP Software Update
2008-05-21 00:00:00
cvelist
cvelist
CVE-2008-2390
2008-05-21 10:00:00
prion
prion
Code injection
2008-05-21 13:24:00
nvd
nvd
CVE-2008-2390
2008-05-21 13:24:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7.7 High
AI Score
Confidence
Low
0.888 High
EPSS
Percentile
98.7%
Related for CVE-2008-2390