vulnwire
9.3crit

CVE-2007-6506in critical feed1 exploit

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.…

Published 18 y ago · modified 4 mo ago · JSON

CVSS
9.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
16.3%
percentile 97%
Public exploits
1
Exploit-DB

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly (2) access arbitrary files via the LoadDataFromFile method.

Exploit prediction (EPSS)

16.35% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

  • EDB-4757 HP Software Update Client 3.0.8.4 - Multiple Vulnerabilities · dos · 2007-12-19

CVSS scores

Assigned byVersionScoreVector
NVD2.09.3AV:N/AC:M/Au:N/C:C/I:C/A:C

References

  • securitytracker.com /id?1019133 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • blogs.zdnet.com /security/?p=768 · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/485451/100/0/threaded · vendor-advisory, x_refsource_HP, x_transferred
  • secunia.com /advisories/28177 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • computerworld.com /action/article.do?command=viewArticleBasic&articleId=9053818 · x_refsource_MISC, x_transferred
  • exploit-db.com /exploits/4757 · exploit, x_refsource_EXPLOIT-DB, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/39153 · vdb-entry, x_refsource_XF, x_transferred
  • vupen.com /english/advisories/2007/4271 · vdb-entry, x_refsource_VUPEN, x_transferred
  • securityfocus.com /bid/26950 · vdb-entry, x_refsource_BID, x_transferred
  • anspi.pl /~porkythepig/hp-issue/wyfukanyszynszyl.txt · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/485734/100/0/threaded · vendor-advisory, x_refsource_HP, x_transferred
  • it.slashdot.org /it/07/12/20/2327242.shtml · x_refsource_MISC, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.