HP Help and Support Center Unspecified Buffer Overflow Vulnerability

Bugtraq ID:	24459
Class:	Boundary Condition Error
CVE:	CVE-2007-3180
Remote:	Yes
Local:	No
Published:	Jun 13 2007 12:00AM
Updated:	Jun 20 2007 10:29PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	HP Help and Support Center 4.4
Not Vulnerable:	HP Help and Support Center 4.4.C

HP Help and Support Center Unspecified Buffer Overflow Vulnerability

HP Help and Support Center is prone to an unspecified remote buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial of service.

HP Help and Support Center Unspecified Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

HP Help and Support Center Unspecified Buffer Overflow Vulnerability

Solution:
The vendor has addressed this issue in version 4.4 C. Please see the vendor references for details on obtaining and applying the appropriate updates.


HP Help and Support Center 4.4

• HP HP Help and Support Center 4.4. C
  ftp://ftp.hp.com/pub/softpaq/sp35501-36000/sp35567.exe

HP Help and Support Center Unspecified Buffer Overflow Vulnerability

References:

• HP Homepage (HP)
  
• HPSBPI02226 SSRT061274 rev.1 - HP Help and Support Center Running on HP Notebook (HP)
  
• HP Help and Supprot Center Update (HP)