HP Instant Support vulnerabilities

10 CVEs affecting HP Instant Support, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-0953, published 2008-06-04.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-3554, published 2007-07-04. High severity, CVSS 7.6. EPSS: 17.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check before 1.5.0.3 allows remote attackers to execute arbitrary code via a long…
CVE-2007-5606, published 2008-06-04. High severity, CVSS 10.0. EPSS: 12.8% chance of exploitation in the next 30 days. Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary…
CVE-2007-5607, published 2008-06-04. High severity, CVSS 7.5. EPSS: 12.8% chance of exploitation in the next 30 days. Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute…
CVE-2007-5604, published 2008-06-04. High severity, CVSS 7.5. EPSS: 11.7% chance of exploitation in the next 30 days. Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary…
CVE-2007-5605, published 2008-06-04. High severity, CVSS 9.3. EPSS: 8.9% chance of exploitation in the next 30 days. Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary…
CVE-2008-0953, published 2008-06-04. High severity, CVSS 10.0. EPSS: 8.8% chance of exploitation in the next 30 days. The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe…
CVE-2007-5610, published 2008-06-04. High severity, CVSS 10.0. EPSS: 8.8% chance of exploitation in the next 30 days. The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to delete an arbitrary file via a…
CVE-2008-0952, published 2008-06-04. High severity, CVSS 9.3. EPSS: 5.5% chance of exploitation in the next 30 days. The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary…
CVE-2007-5608, published 2008-06-04. High severity, CVSS 9.3. EPSS: 3.6% chance of exploitation in the next 30 days. The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary…
CVE-2002-0993, published 2002-10-04. Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days. Unknown vulnerability in HP Instant Support Enterprise Edition (ISEE) product U2512A for HP-UX 11.00 and 11.11 may allow authenticated users to access restricted files.