CVEvulnerability
CVE-2007-6513
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.
Affected configurations
• hp esupportdiagnostics 1.0.11.0
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2007-12/0470.html archives.neohapsis.com
- http://www.heise-security.co.uk/news/100934 www.heise-security.co.uk
- http://www.securityfocus.com/bid/26967 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39156 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2007-12/0470.html archives.neohapsis.com
- http://www.heise-security.co.uk/news/100934 www.heise-security.co.uk
- http://www.securityfocus.com/bid/26967 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39156 exchange.xforce.ibmcloud.com