CVE-2007-6333

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• HP Compaq Notebooks - ActiveX Remote Code Execution2007-12-11 · remote · windows · Verified

Impact

The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method.

Affected products

References

• NVD record
• CVE.org record
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486
• http://secunia.com/advisories/28055
• http://securitytracker.com/id?1019086
• http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt
• http://www.securityfocus.com/archive/1/484880/100/100/threaded
• http://www.securityfocus.com/bid/26823
• http://www.vupen.com/english/advisories/2007/4192
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38994
• https://www.exploit-db.com/exploits/4720
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486
• http://secunia.com/advisories/28055
• http://securitytracker.com/id?1019086
• http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt
• http://www.securityfocus.com/archive/1/484880/100/100/threaded
• http://www.securityfocus.com/bid/26823
• http://www.vupen.com/english/advisories/2007/4192
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38994
• https://www.exploit-db.com/exploits/4720