{"api_version":"1","generated_at":"2026-07-23T01:28:14+00:00","cve":"CVE-2007-6331","urls":{"html":"https://cve.report/CVE-2007-6331","api":"https://cve.report/api/cve/CVE-2007-6331.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-6331","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-6331"},"summary":{"title":"CVE-2007-6331","description":"Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method.  NOTE: only a user-assisted attack is possible on Windows Vista.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-12-13 19:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-22","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://secunia.com/advisories/28055","name":"http://secunia.com/advisories/28055","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"HP Quick Launch Button Info Center ActiveX Control Insecure Methods - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/484880/100/100/threaded","name":"http://www.securityfocus.com/archive/1/484880/100/100/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt","name":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/plain","httpstatus":"-1","archivestatus":"200"},{"url":"http://securitytracker.com/id?1019086","name":"http://securitytracker.com/id?1019086","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - HP Quick Launch Button 'HPInfoDLL.dll' ActiveX Control Lets Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486","name":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access - c01300486 - \r\n\t\tHP Business Support Center","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38991","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38991","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/4192","name":"http://www.vupen.com/english/advisories/2007/4192","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/26823","name":"http://www.securityfocus.com/bid/26823","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"HP Info Center HPInfoDLL.DLL ActiveX Control Multiple Arbitrary Code Execution Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.exploit-db.com/exploits/4720","name":"https://www.exploit-db.com/exploits/4720","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP Compaq Notebooks ActiveX Remote Code Execution Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-6331","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6331","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"6331","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"info_center","cpe6":"1.0.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"6331","vulnerable":"1","versionEndIncluding":"6.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"quick_launch_button","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:02:36.298Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"26823","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/26823"},{"name":"SSRT071502","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"4720","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/4720"},{"name":"ADV-2007-4192","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/4192"},{"name":"1019086","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1019086"},{"name":"28055","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28055"},{"name":"HPSBGN02298","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"hpinfo-hpinfo-command-execution(38991)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38991"},{"name":"20071211 HP notebooks remote code execution vulnerability (multiple series)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/484880/100/100/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-12-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method.  NOTE: only a user-assisted attack is possible on Windows Vista."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"26823","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/26823"},{"name":"SSRT071502","tags":["vendor-advisory","x_refsource_HP"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"4720","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/4720"},{"name":"ADV-2007-4192","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/4192"},{"name":"1019086","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1019086"},{"name":"28055","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28055"},{"name":"HPSBGN02298","tags":["vendor-advisory","x_refsource_HP"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"hpinfo-hpinfo-command-execution(38991)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38991"},{"name":"20071211 HP notebooks remote code execution vulnerability (multiple series)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/484880/100/100/threaded"},{"tags":["x_refsource_MISC"],"url":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-6331","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method.  NOTE: only a user-assisted attack is possible on Windows Vista."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"26823","refsource":"BID","url":"http://www.securityfocus.com/bid/26823"},{"name":"SSRT071502","refsource":"HP","url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"4720","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/4720"},{"name":"ADV-2007-4192","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/4192"},{"name":"1019086","refsource":"SECTRACK","url":"http://securitytracker.com/id?1019086"},{"name":"28055","refsource":"SECUNIA","url":"http://secunia.com/advisories/28055"},{"name":"HPSBGN02298","refsource":"HP","url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"hpinfo-hpinfo-command-execution(38991)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38991"},{"name":"20071211 HP notebooks remote code execution vulnerability (multiple series)","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/484880/100/100/threaded"},{"name":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt","refsource":"MISC","url":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-6331","datePublished":"2007-12-13T19:00:00.000Z","dateReserved":"2007-12-13T00:00:00.000Z","dateUpdated":"2024-08-07T16:02:36.298Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-12-13 19:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-22","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:info_center:1.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DE1CB4B1-ED5B-423E-B976-E88EEE3FC8AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:quick_launch_button:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3","matchCriteriaId":"EED37865-BCCF-4F1B-B2CA-363DBBBEA153"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"6331","Ordinal":"1","Title":"CVE-2007-6331","CVE":"CVE-2007-6331","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"6331","Ordinal":"1","NoteData":"Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier allows remote attackers to execute arbitrary programs via the first argument to the LaunchApp method.  NOTE: only a user-assisted attack is possible on Windows Vista.","Type":"Description","Title":"CVE-2007-6331"},{"CveYear":"2007","CveId":"6331","Ordinal":"2","NoteData":"2007-12-13","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"6331","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}