CVE-2008-2390: HP Software Update

Medium severity, CVSS 6.8. EPSS: 6.9% chance of exploitation in the next 30 days.

Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the first argument.

Affected products

• HP Software Update: version 4.0.0.1 only

Published 2008-05-21. Last modified 2026-06-16.