Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method. NOTE: only a user-assisted attack is possible on Windows Vista.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securityfocus.com/bid/26823 | vdb-entry x_refsource_BID |
| http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 | vendor-advisory x_refsource_HP |
| https://www.exploit-db.com/exploits/4720 | exploit x_refsource_EXPLOIT-DB |
| http://www.vupen.com/english/advisories/2007/4192 | vdb-entry x_refsource_VUPEN |
| http://securitytracker.com/id?1019086 | vdb-entry x_refsource_SECTRACK |
| http://secunia.com/advisories/28055 | third-party-advisory x_refsource_SECUNIA |
| http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 | vendor-advisory x_refsource_HP |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/38991 | vdb-entry x_refsource_XF |
| http://www.securityfocus.com/archive/1/484880/100/100/threaded | mailing-list x_refsource_BUGTRAQ |
| http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt | x_refsource_MISC |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securityfocus.com/bid/26823 | vdb-entry x_refsource_BID x_transferred |
| http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 | vendor-advisory x_refsource_HP x_transferred |
| https://www.exploit-db.com/exploits/4720 | exploit x_refsource_EXPLOIT-DB x_transferred |
| http://www.vupen.com/english/advisories/2007/4192 | vdb-entry x_refsource_VUPEN x_transferred |
| http://securitytracker.com/id?1019086 | vdb-entry x_refsource_SECTRACK x_transferred |
| http://secunia.com/advisories/28055 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486 | vendor-advisory x_refsource_HP x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/38991 | vdb-entry x_refsource_XF x_transferred |
| http://www.securityfocus.com/archive/1/484880/100/100/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt | x_refsource_MISC x_transferred |