CVE-2007-6506 | BDVDB-2026-28368 Detail
Description#
The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly (2) access arbitrary files via the LoadDataFromFile method.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securitytracker.com/id?1019133
- http://blogs.zdnet.com/security/?p=768
- http://www.securityfocus.com/archive/1/485451/100/0/threaded
- http://secunia.com/advisories/28177
- http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9053818
- https://www.exploit-db.com/exploits/4757
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39153
- http://www.vupen.com/english/advisories/2007/4271
- http://www.securityfocus.com/bid/26950
- http://www.anspi.pl/~porkythepig/hp-issue/wyfukanyszynszyl.txt
- http://www.securityfocus.com/archive/1/485734/100/0/threaded
- http://it.slashdot.org/it/07/12/20/2327242.shtml
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.