Search
Find a vulnerability
Search criteria
6 vulnerabilities found for quick_launch_button by hp
CVE-2007-6332 (GCVE-0-2007-6332)
Vulnerability from nvd – Published: 2007-12-13 19:00 – Updated: 2024-08-07 16:02
VLAI
EPSS
VEX
Summary
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/26823 | vdb-entryx_refsource_BID |
| http://h20000.www2.hp.com/bizsupport/TechSupport/… | vendor-advisoryx_refsource_HP |
| https://www.exploit-db.com/exploits/4720 | exploitx_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2007/4192 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1019086 | vdb-entryx_refsource_SECTRACK |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/28055 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/archive/1/484880/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.anspi.pl/~porkythepig/hp-issue/kilokie… | x_refsource_MISC |
Date Public
2007-12-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:02:36.321Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-12-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-6332",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "26823",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"name": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt",
"refsource": "MISC",
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-6332",
"datePublished": "2007-12-13T19:00:00.000Z",
"dateReserved": "2007-12-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:02:36.321Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-6331 (GCVE-0-2007-6331)
Vulnerability from nvd – Published: 2007-12-13 19:00 – Updated: 2024-08-07 16:02
VLAI
EPSS
VEX
Summary
Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/26823 | vdb-entryx_refsource_BID |
| http://h20000.www2.hp.com/bizsupport/TechSupport/… | vendor-advisoryx_refsource_HP |
| https://www.exploit-db.com/exploits/4720 | exploitx_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2007/4192 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1019086 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/28055 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/484880/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.anspi.pl/~porkythepig/hp-issue/kilokie… | x_refsource_MISC |
Date Public
2007-12-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:02:36.298Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "hpinfo-hpinfo-command-execution(38991)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38991"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-12-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "hpinfo-hpinfo-command-execution(38991)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38991"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-6331",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "26823",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "28055",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "hpinfo-hpinfo-command-execution(38991)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38991"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"name": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt",
"refsource": "MISC",
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-6331",
"datePublished": "2007-12-13T19:00:00.000Z",
"dateReserved": "2007-12-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:02:36.298Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-6333 (GCVE-0-2007-6333)
Vulnerability from nvd – Published: 2007-12-13 19:00 – Updated: 2024-08-07 16:02
VLAI
EPSS
VEX
Summary
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/26823 | vdb-entryx_refsource_BID |
| http://h20000.www2.hp.com/bizsupport/TechSupport/… | vendor-advisoryx_refsource_HP |
| https://www.exploit-db.com/exploits/4720 | exploitx_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2007/4192 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1019086 | vdb-entryx_refsource_SECTRACK |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/28055 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/archive/1/484880/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.anspi.pl/~porkythepig/hp-issue/kilokie… | x_refsource_MISC |
Date Public
2007-12-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:02:36.245Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-12-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-6333",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "26823",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"name": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt",
"refsource": "MISC",
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-6333",
"datePublished": "2007-12-13T19:00:00.000Z",
"dateReserved": "2007-12-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:02:36.245Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-6332 (GCVE-0-2007-6332)
Vulnerability from cvelistv5 – Published: 2007-12-13 19:00 – Updated: 2024-08-07 16:02
VLAI
EPSS
VEX
Summary
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/26823 | vdb-entryx_refsource_BID |
| http://h20000.www2.hp.com/bizsupport/TechSupport/… | vendor-advisoryx_refsource_HP |
| https://www.exploit-db.com/exploits/4720 | exploitx_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2007/4192 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1019086 | vdb-entryx_refsource_SECTRACK |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/28055 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/archive/1/484880/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.anspi.pl/~porkythepig/hp-issue/kilokie… | x_refsource_MISC |
Date Public
2007-12-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:02:36.321Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-12-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-6332",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "26823",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"name": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt",
"refsource": "MISC",
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-6332",
"datePublished": "2007-12-13T19:00:00.000Z",
"dateReserved": "2007-12-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:02:36.321Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-6331 (GCVE-0-2007-6331)
Vulnerability from cvelistv5 – Published: 2007-12-13 19:00 – Updated: 2024-08-07 16:02
VLAI
EPSS
VEX
Summary
Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/26823 | vdb-entryx_refsource_BID |
| http://h20000.www2.hp.com/bizsupport/TechSupport/… | vendor-advisoryx_refsource_HP |
| https://www.exploit-db.com/exploits/4720 | exploitx_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2007/4192 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1019086 | vdb-entryx_refsource_SECTRACK |
| http://secunia.com/advisories/28055 | third-party-advisoryx_refsource_SECUNIA |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/archive/1/484880/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.anspi.pl/~porkythepig/hp-issue/kilokie… | x_refsource_MISC |
Date Public
2007-12-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:02:36.298Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "hpinfo-hpinfo-command-execution(38991)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38991"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-12-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "hpinfo-hpinfo-command-execution(38991)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38991"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-6331",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "26823",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "28055",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "hpinfo-hpinfo-command-execution(38991)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38991"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"name": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt",
"refsource": "MISC",
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-6331",
"datePublished": "2007-12-13T19:00:00.000Z",
"dateReserved": "2007-12-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:02:36.298Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2007-6333 (GCVE-0-2007-6333)
Vulnerability from cvelistv5 – Published: 2007-12-13 19:00 – Updated: 2024-08-07 16:02
VLAI
EPSS
VEX
Summary
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
9 references
| URL | Tags |
|---|---|
| http://www.securityfocus.com/bid/26823 | vdb-entryx_refsource_BID |
| http://h20000.www2.hp.com/bizsupport/TechSupport/… | vendor-advisoryx_refsource_HP |
| https://www.exploit-db.com/exploits/4720 | exploitx_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2007/4192 | vdb-entryx_refsource_VUPEN |
| http://securitytracker.com/id?1019086 | vdb-entryx_refsource_SECTRACK |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://secunia.com/advisories/28055 | third-party-advisoryx_refsource_SECUNIA |
| http://www.securityfocus.com/archive/1/484880/100… | mailing-listx_refsource_BUGTRAQ |
| http://www.anspi.pl/~porkythepig/hp-issue/kilokie… | x_refsource_MISC |
Date Public
2007-12-11 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T16:02:36.245Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN",
"x_transferred"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK",
"x_transferred"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA",
"x_transferred"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP",
"x_transferred"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2007-12-11T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-10-15T20:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "26823",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"tags": [
"vdb-entry",
"x_refsource_VUPEN"
],
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"tags": [
"vdb-entry",
"x_refsource_SECTRACK"
],
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"tags": [
"third-party-advisory",
"x_refsource_SECUNIA"
],
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"tags": [
"vendor-advisory",
"x_refsource_HP"
],
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2007-6333",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "26823",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/26823"
},
{
"name": "SSRT071502",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "4720",
"refsource": "EXPLOIT-DB",
"url": "https://www.exploit-db.com/exploits/4720"
},
{
"name": "ADV-2007-4192",
"refsource": "VUPEN",
"url": "http://www.vupen.com/english/advisories/2007/4192"
},
{
"name": "1019086",
"refsource": "SECTRACK",
"url": "http://securitytracker.com/id?1019086"
},
{
"name": "hpinfo-hpinfo-information-disclosure(38994)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"
},
{
"name": "28055",
"refsource": "SECUNIA",
"url": "http://secunia.com/advisories/28055"
},
{
"name": "HPSBGN02298",
"refsource": "HP",
"url": "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"
},
{
"name": "20071211 HP notebooks remote code execution vulnerability (multiple series)",
"refsource": "BUGTRAQ",
"url": "http://www.securityfocus.com/archive/1/484880/100/100/threaded"
},
{
"name": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt",
"refsource": "MISC",
"url": "http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2007-6333",
"datePublished": "2007-12-13T19:00:00.000Z",
"dateReserved": "2007-12-13T00:00:00.000Z",
"dateUpdated": "2024-08-07T16:02:36.245Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}