HP Info Center HPInfoDLL.DLL ActiveX控件多个任意代码执行漏洞

HP Info Center是一款设计用于HP笔记本用户快速查询信息信息和硬件配置的程序。 HP Info Center包含的HPInfoDLL.dll ActiveX控件存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 HPInfoDLL.dll的CLSID为： 62DDEB79-15B2-41E3-8834-D3B80493887A 默认包含于"Safe for Scripting" OLE组件，默认路径为C:\Program Files\Hewlett-Packard\HP Info Center，这个控件包含如下不安全方法： VARIANT...

DSquare Exploit Pack: D2SEC_HPINFO

Name| d2sechpinfo ---|--- CVE| CVE-2007-6331 Exploit Pack| D2ExploitPack Description| HP Info Center HPInfoDLL.DLL ActiveX Arbitrary Code Execution Vulnerability Notes|...

CVE-2007-6332: Undefined Security Weakness

The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center hpinfocenter.exe 1.0.1.1 in HP Quick Launch Button QLBCTRL.exe, aka QLB 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the...