CVE-2008-0953: HP Instant Support

High severity, CVSS 10.0. EPSS: 8.8% chance of exploitation in the next 30 days.

The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.

Affected products

• HP Instant Support: up to and including 1.0.0.23

Published 2008-06-04. Last modified 2026-06-16.