CVE-2007-5604

HP Instant Support < 1.0.0.23 - Remote Code Execution via ExtractCab Function

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-5604. PoCs published by Dennis Rand.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in HP Instant Support's HPISDataManager.dll ActiveX control. It uses a VBScript to trigger the vulnerability by passing an overly long string to the ExtractCab method, potentially leading to arbitrary code execution.

Description

Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5605, CVE-2007-5606, and CVE-2007-5607.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Dennis Rand · xmlremotewindows

https://www.exploit-db.com/exploits/31873

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in HP Instant Support's HPISDataManager.dll ActiveX control. It uses a VBScript to trigger the vulnerability by passing an overly long string to the ExtractCab method, potentially leading to arbitrary code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: HP Instant Support 1.0.0.22 and earlier

No auth needed

Prerequisites: Victim must have the vulnerable ActiveX control installed · Victim must visit a malicious webpage or open a malicious file

MITRE ATT&CK