CVE-2008-0712
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
HP软件更新是用于检查和下载HP产品固件、软件和驱动升级的HP应用程序，可帮助更新HP产品的安全性和功能性。 HP软件更新在Windows平台下所安装的HPeDiag ActiveX控件组件中存在安全漏洞。远程信息泄露和执行任意代码。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2008-0712
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors. NOTE: this might overlap CVE-2007-6513.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
HP HPeDiag ActiveX控件信息泄露及远程代码执行漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HP软件更新是用于检查和下载HP产品固件、软件和驱动升级的HP应用程序，可帮助更新HP产品的安全性和功能性。 HP软件更新在Windows平台下所安装的HPeDiag ActiveX控件组件中存在安全漏洞。远程信息泄露和执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2008-0712
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-0712
请登录查看更多情报信息。
Vendor Advisories for CVE-2008-0712 (5)
Mailing List Discussions for CVE-2008-0712 (1)
Same Patch Batch · n/a · 2008-04-25 · 14 CVEs total
| CVE-2008-1964 | xine-lib NES声音格式解码器copyright字段栈溢出漏洞 | |
| CVE-2008-1965 | IBM Lotus Expeditor URI处理器命令执行漏洞 | |
| CVE-2008-1953 | Magnolia Sitedesigner 'query'参数 跨站脚本攻击漏洞 | |
| CVE-2008-1954 | Web Calendar Pro 'one_day.php' SQL注入漏洞 | |
| CVE-2008-1955 | MyBoard 'rep.php'跨站脚本攻击漏洞 | |
| CVE-2008-1956 | Wikepage Opus index.php 跨站脚本攻击漏洞 | |
| CVE-2008-1957 | Tr Script News 'news.php' SQL注入漏洞 | |
| CVE-2008-1958 | Tr script news admin/main.php 无限制文件上传漏洞 | |
| CVE-2008-1959 | SIPp call.cpp文件远程栈溢出漏洞 | |
| CVE-2008-1960 | ContRay cgi-bin/contray/search.cgi 跨站脚本攻击漏洞 | |
| CVE-2008-1961 | Voice of Web AllMyGuests index.php SQL注入漏洞 | |
| CVE-2008-1962 | Aterr 多个目录遍历漏洞 | |
| CVE-2008-1963 | Grape Web Statistics 'includes/functions.php' PHP远程文件包含漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2008-0712
No comments yet