Detections
Analytics
CVE-2007-6332
high
Description
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method.
References
https://www.exploit-db.com/exploits/4720
https://exchange.xforce.ibmcloud.com/vulnerabilities/38994
https://euvd.enisa.europa.eu/vulnerability/EUVD-2007-6299
http://www.vupen.com/english/advisories/2007/4192
http://www.securityfocus.com/bid/26823
http://www.securityfocus.com/archive/1/484880/100/100/threaded
http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt
http://securitytracker.com/id?1019086
http://secunia.com/advisories/28055
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486