HP Software Update HPRulesEngine.ContentCollection ActiveX (RulesEngine.dll) Multiple Insecure Methods

High Nessus Plugin ID 29747


The remote Windows host has an ActiveX control that allows reading and writing of arbitrary files.


The remote host contains the HP Software Update software, installed by default on many HP notebooks to support automatic software updates and vulnerability patching.

The version of this software on the remote host includes an ActiveX control, 'RulesEngineLib', that reportedly contains two insecure methods - 'LoadDataFromFile()' and 'SaveToFile()' - that are marked as 'Safe for Scripting' and allow for reading and overwriting arbitrary files on the affected system. If a remote attacker can trick a user on the affected host into visiting a specially crafted web page, this issue could be leveraged to effectively destroy arbitrary files on the remote host, potentially even files that are vital for its operation, or to read the contents of arbitrary files.


Either use HP Software Update itself to update the software or disable use of this ActiveX control from within Internet Explorer by setting its kill bit.

See Also



Plugin Details

Severity: High

ID: 29747

File Name: hp_update_rulesengine_activex_insecure.nasl

Version: $Revision: 1.16 $

Type: local

Agent: windows

Family: Windows

Published: 2007/12/23

Modified: 2014/04/17

Dependencies: 13855

Risk Information

Risk Factor: High


Base Score: 9.3

Temporal Score: 7.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:hp:software_update

Required KB Items: SMB/Registry/Enumerated

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2007/12/21

Reference Information

CVE: CVE-2007-6506

BID: 26950

OSVDB: 40237, 40238