HP Instant Support 'HPISDataManager.dll' ActiveX Control Arbitrary File Download Vulnerability

HP Instant Support 'HPISDataManager.dll' ActiveX Control Arbitrary File Download Vulnerability

References:

HP Instant Support Home Page (HP )
HP Instant Support Security Bulletin (HP )
Microsoft Knowledge Base Article 240797 (Microsoft)
Microsoft Security Advisory (953839) Cumulative Security Update of ActiveX Kill (Microsoft)
VU#949587 HP Online Support Service ActiveX DownloadFile() arbitrary file downlo (US-CERT)

Privacy Statement
Copyright 2010, SecurityFocus