{"api_version":"1","generated_at":"2026-07-23T11:29:39+00:00","cve":"CVE-2008-0712","urls":{"html":"https://cve.report/CVE-2008-0712","api":"https://cve.report/api/cve/CVE-2008-0712.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2008-0712","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2008-0712"},"summary":{"title":"CVE-2008-0712","description":"Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors.  NOTE: this might overlap CVE-2007-6513.","state":"PUBLISHED","assigner":"mitre","published_at":"2008-04-25 19:05:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.vupen.com/english/advisories/2008/1356/references","name":"http://www.vupen.com/english/advisories/2008/1356/references","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securitytracker.com/id?1019922","name":"http://www.securitytracker.com/id?1019922","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP Software Update HPeDiag ActiveX Control Lets Remote Users Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2","name":"http://marc.info/?l=bugtraq&m=120907060320901&w=2","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/28929","name":"http://www.securityfocus.com/bid/28929","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP HPeDiag ActiveX Control Multiple Information Disclosure and Remote Code Execution Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/29966","name":"http://secunia.com/advisories/29966","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"HP Software Update HPeDiag ActiveX Control Insecure Methods and Buffer Overflow - Secunia Advisories - Vulnerability Intelligence - Secunia.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42003","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42003","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2008-0712","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-0712","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2008","cve_id":"712","vulnerable":"1","versionEndIncluding":"4.000.009.002","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"hp","cpe5":"software_update","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T07:54:23.005Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"HPSBGN02333","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2"},{"name":"28929","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/28929"},{"name":"ADV-2008-1356","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2008/1356/references"},{"name":"SSRT080031","tags":["vendor-advisory","x_refsource_HP","x_transferred"],"url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2"},{"name":"hpsoftware-hpediag-code-execution(42003)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42003"},{"name":"29966","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/29966"},{"name":"1019922","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1019922"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2008-04-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors.  NOTE: this might overlap CVE-2007-6513."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-08-07T12:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"HPSBGN02333","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2"},{"name":"28929","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/28929"},{"name":"ADV-2008-1356","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2008/1356/references"},{"name":"SSRT080031","tags":["vendor-advisory","x_refsource_HP"],"url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2"},{"name":"hpsoftware-hpediag-code-execution(42003)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42003"},{"name":"29966","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/29966"},{"name":"1019922","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1019922"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2008-0712","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors.  NOTE: this might overlap CVE-2007-6513."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"HPSBGN02333","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2"},{"name":"28929","refsource":"BID","url":"http://www.securityfocus.com/bid/28929"},{"name":"ADV-2008-1356","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2008/1356/references"},{"name":"SSRT080031","refsource":"HP","url":"http://marc.info/?l=bugtraq&m=120907060320901&w=2"},{"name":"hpsoftware-hpediag-code-execution(42003)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/42003"},{"name":"29966","refsource":"SECUNIA","url":"http://secunia.com/advisories/29966"},{"name":"1019922","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1019922"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2008-0712","datePublished":"2008-04-25T17:00:00.000Z","dateReserved":"2008-02-11T00:00:00.000Z","dateUpdated":"2024-08-07T07:54:23.005Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2008-04-25 19:05:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":true}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:hp:software_update:*:*:*:*:*:*:*:*","versionEndIncluding":"4.000.009.002","matchCriteriaId":"0A451839-45B9-4313-A526-D7101F9B2495"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2008","CveId":"712","Ordinal":"1","Title":"CVE-2008-0712","CVE":"CVE-2008-0712","Year":"2008"},"notes":[{"CveYear":"2008","CveId":"712","Ordinal":"1","NoteData":"Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors.  NOTE: this might overlap CVE-2007-6513.","Type":"Description","Title":"CVE-2008-0712"},{"CveYear":"2008","CveId":"712","Ordinal":"2","NoteData":"2008-04-25","Type":"Other","Title":"Published"},{"CveYear":"2008","CveId":"712","Ordinal":"3","NoteData":"2017-08-07","Type":"Other","Title":"Modified"}]}}}