CVE-2007-5607

HP Instant Support < 1.0.0.23 - Remote Code Execution via RegistryString Function Buffer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-5607. PoCs published by Dennis Rand.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in HP Instant Support's HPISDataManager.dll ActiveX control. It uses VBScript to trigger the vulnerability by passing an overly long string to the RegistryString property, potentially leading to arbitrary code execution.

Description

Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5606.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Dennis Rand · xmldoswindows

https://www.exploit-db.com/exploits/31877

View Code ZIP pw:eip

This exploit targets a buffer overflow vulnerability in HP Instant Support's HPISDataManager.dll ActiveX control. It uses VBScript to trigger the vulnerability by passing an overly long string to the RegistryString property, potentially leading to arbitrary code execution.

Classification

Working Poc 90%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: HP Instant Support 1.0.0.22 and earlier

No auth needed

Prerequisites: Victim must have the vulnerable ActiveX control installed and enabled in Internet Explorer · Attacker must deliver the exploit via a malicious web page or similar vector

MITRE ATT&CK

T1189 - Drive-by Compromise T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →