HP Application Information Optimizer 'oasoa.exe' Remote Code Execution Vulnerability

Bugtraq ID:	64557
Class:	Boundary Condition Error
CVE:	CVE-2013-6189
Remote:	Yes
Local:	No
Published:	Dec 19 2013 12:00AM
Updated:	Jan 31 2014 12:54AM
Credit:	[email protected]
Vulnerable:
Not Vulnerable:

HP Application Information Optimizer 'oasoa.exe' Remote Code Execution Vulnerability

HP Application Information Optimizer is prone to a remote code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

HP Application Information Optimizer 6.2, 6.3, 6.4, and 7.0 are vulnerable.

HP Application Information Optimizer 'oasoa.exe' Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Application Information Optimizer 'oasoa.exe' Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Application Information Optimizer 'oasoa.exe' Remote Code Execution Vulnerability

References:

• HP Homepage (HP)