CVE-2008-2390

CVE-2008-2390 affects HP Software Update 4.0.0.1, where Hpufunction.dll exposes unsafe methods ExecuteAsync and Execute. The underlying issue is that an absolute pathname in the first argument allows remote code execution. Public exploits exist and the impact is arbitrary code execution with netw...