EUVD-2008-2385

Malware in sbrugna...

CVE-2008-2390

Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe 1 ExecuteAsync and 2 Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the first argument...

Code injection

Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe 1 ExecuteAsync and 2 Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the first argument...

CVE-2008-2390

CVE-2008-2390 affects HP Software Update 4.0.0.1, where Hpufunction.dll exposes unsafe methods ExecuteAsync and Execute. The underlying issue is that an absolute pathname in the first argument allows remote code execution. Public exploits exist and the impact is arbitrary code execution with netw...

HP Software Update - 'Hpufunction.dll 4.0.0.1' Insecure Method

&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& Insecure Methods in HP Update Software. Remote: Yes Execute code remotely is possible using methods ExecuteAsync and Execute :- If a user visits the malicious page the attacker can execute code...