Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-6333. PoCs published by porkythepig.
AI-analyzed exploit summary This is a detailed technical analysis of CVE-2007-6331, which involves insecure methods in the HP Info Center ActiveX control (HPInfoDLL.dll) allowing remote code execution and registry manipulation. The writeup explains the vulnerable methods (GetRegValue, SetRegValue, LaunchApp) and attack vectors, including silent remote execution via windowless processes.
Description
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, allows remote attackers to read arbitrary registry values via the arguments to the GetRegValue method.
Exploits (1)
This is a detailed technical analysis of CVE-2007-6331, which involves insecure methods in the HP Info Center ActiveX control (HPInfoDLL.dll) allowing remote code execution and registry manipulation. The writeup explains the vulnerable methods (GetRegValue, SetRegValue, LaunchApp) and attack vectors, including silent remote execution via windowless processes.