HP Instant Support 'HPISDataManager.dll' 'StartApp' ActiveX Control Insecure Method Vulnerability

HP Instant Support 'HPISDataManager.dll' 'StartApp' ActiveX Control Insecure Method Vulnerability

References:

HP Instant Support Home Page (HP )
Microsoft Security Advisory (953839) Cumulative Security Update of ActiveX Kill (Microsoft)
Microsoft Support Document 240797 (Microsoft)
Advisory - HP Online Support Service ActiveX multiple vulnerabilities (CSIS Security Research and Intelligence)
VU#998779 HP Online Support Service ActiveX StartApp() arbitrary code execution (US-CERT)

Privacy Statement
Copyright 2010, SecurityFocus