HPSBGN03605 rev.1 - HP Support Assistant DLL Loading Vulnerability

Potential Security Impact

Execution of arbitrary code.

Source: HP, HP Product Security Response Team (PSRT)

Reported By: Marius Gabriel Mihai

VULNERABILITY SUMMARY

The vulnerability allows an unauthorized person to load arbitrary code.

RESOLUTION

Version 8.7.50.3 was released on December 11, 2018 which will automatically update HP Support Assistant clients.

To manually update HP Support Assistant to the latest version, please follow the steps below:

1. Open HP Support Assistant from the Start menu.

2. Click About in the top right.

3. Check the version listed for HP Support Assistant and ensure it is 8.7.50.3 or newer.

4. If this version or later is not installed, select Check for latest version to install it.