{"api_version":"1","generated_at":"2026-07-23T10:51:13+00:00","cve":"CVE-2007-6332","urls":{"html":"https://cve.report/CVE-2007-6332","api":"https://cve.report/api/cve/CVE-2007-6332.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-6332","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-6332"},"summary":{"title":"CVE-2007-6332","description":"The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-12-13 19:46:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"9.3","severity":"","vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://secunia.com/advisories/28055","name":"http://secunia.com/advisories/28055","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"HP Quick Launch Button Info Center ActiveX Control Insecure Methods - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/484880/100/100/threaded","name":"http://www.securityfocus.com/archive/1/484880/100/100/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt","name":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"text/plain","httpstatus":"-1","archivestatus":"200"},{"url":"http://securitytracker.com/id?1019086","name":"http://securitytracker.com/id?1019086","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker.com Archives - HP Quick Launch Button 'HPInfoDLL.dll' ActiveX Control Lets Remote Users Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486","name":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HPSBGN02298 SSRT071502 rev.1 - HP Quick Launch Button (QLB) Running on Windows, Remote Execution of Arbitrary Code, Gain Privileged Access - c01300486 - \r\n\t\tHP Business Support Center","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38994","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38994","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/4192","name":"http://www.vupen.com/english/advisories/2007/4192","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/26823","name":"http://www.securityfocus.com/bid/26823","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"HP Info Center HPInfoDLL.DLL ActiveX Control Multiple Arbitrary Code Execution Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.exploit-db.com/exploits/4720","name":"https://www.exploit-db.com/exploits/4720","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP Compaq Notebooks ActiveX Remote Code Execution Exploit","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-6332","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-6332","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"6332","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"info_center","cpe6":"1.0.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2007","cve_id":"6332","vulnerable":"1","versionEndIncluding":"6.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"quick_launch_button","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T16:02:36.321Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"26823","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/26823"},{"name":"SSRT071502","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"4720","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"],"url":"https://www.exploit-db.com/exploits/4720"},{"name":"ADV-2007-4192","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/4192"},{"name":"1019086","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1019086"},{"name":"hpinfo-hpinfo-information-disclosure(38994)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"},{"name":"28055","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/28055"},{"name":"HPSBGN02298","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"20071211 HP notebooks remote code execution vulnerability (multiple series)","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/484880/100/100/threaded"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-12-11T00:00:00.000Z","descriptions":[{"lang":"en","value":"The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"26823","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/26823"},{"name":"SSRT071502","tags":["vendor-advisory","x_refsource_HP"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"4720","tags":["exploit","x_refsource_EXPLOIT-DB"],"url":"https://www.exploit-db.com/exploits/4720"},{"name":"ADV-2007-4192","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/4192"},{"name":"1019086","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1019086"},{"name":"hpinfo-hpinfo-information-disclosure(38994)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"},{"name":"28055","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/28055"},{"name":"HPSBGN02298","tags":["vendor-advisory","x_refsource_HP"],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"20071211 HP notebooks remote code execution vulnerability (multiple series)","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/484880/100/100/threaded"},{"tags":["x_refsource_MISC"],"url":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-6332","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"26823","refsource":"BID","url":"http://www.securityfocus.com/bid/26823"},{"name":"SSRT071502","refsource":"HP","url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"4720","refsource":"EXPLOIT-DB","url":"https://www.exploit-db.com/exploits/4720"},{"name":"ADV-2007-4192","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/4192"},{"name":"1019086","refsource":"SECTRACK","url":"http://securitytracker.com/id?1019086"},{"name":"hpinfo-hpinfo-information-disclosure(38994)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/38994"},{"name":"28055","refsource":"SECUNIA","url":"http://secunia.com/advisories/28055"},{"name":"HPSBGN02298","refsource":"HP","url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01300486"},{"name":"20071211 HP notebooks remote code execution vulnerability (multiple series)","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/484880/100/100/threaded"},{"name":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt","refsource":"MISC","url":"http://www.anspi.pl/~porkythepig/hp-issue/kilokieubasy.txt"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-6332","datePublished":"2007-12-13T19:00:00.000Z","dateReserved":"2007-12-13T00:00:00.000Z","dateUpdated":"2024-08-07T16:02:36.321Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-12-13 19:46:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","baseScore":9.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":8.6,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:info_center:1.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DE1CB4B1-ED5B-423E-B976-E88EEE3FC8AF"},{"vulnerable":true,"criteria":"cpe:2.3:a:hp:quick_launch_button:*:*:*:*:*:*:*:*","versionEndIncluding":"6.3","matchCriteriaId":"EED37865-BCCF-4F1B-B2CA-363DBBBEA153"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"6332","Ordinal":"1","Title":"CVE-2007-6332","CVE":"CVE-2007-6332","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"6332","Ordinal":"1","NoteData":"The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 in HP Quick Launch Button (QLBCTRL.exe, aka QLB) 6.3 and earlier, on Microsoft Windows before Vista allows remote attackers to create or modify arbitrary registry values via the arguments to the SetRegValue method.","Type":"Description","Title":"CVE-2007-6332"},{"CveYear":"2007","CveId":"6332","Ordinal":"2","NoteData":"2007-12-13","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"6332","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}