Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-6331. PoCs published by porkythepig.
AI-analyzed exploit summary This is a detailed technical analysis of CVE-2007-6331, which involves insecure methods in the HP Info Center ActiveX control (HPInfoDLL.dll) allowing remote code execution and registry manipulation. The writeup explains the vulnerable methods (GetRegValue, SetRegValue, LaunchApp) and attack vectors, including silent remote execution via windowless processes.
Description
Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista.
Exploits (1)
This is a detailed technical analysis of CVE-2007-6331, which involves insecure methods in the HP Info Center ActiveX control (HPInfoDLL.dll) allowing remote code execution and registry manipulation. The writeup explains the vulnerable methods (GetRegValue, SetRegValue, LaunchApp) and attack vectors, including silent remote execution via windowless processes.