CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-6506

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly (2) access arbitrary files via the LoadDataFromFile method.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.185

EPSS Ranking 94.9%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2007-6506

Hp » Software Update » Version: 2.0.37.20031205

cpe:2.3:a:hp:software_update:2.0.37.20031205
Hp » Software Update » Version: 2.0.38.20040107

cpe:2.3:a:hp:software_update:2.0.38.20040107
Hp » Software Update » Version: 3.0.2.991

cpe:2.3:a:hp:software_update:3.0.2.991
Hp » Software Update » Version: 3.0.5.1

cpe:2.3:a:hp:software_update:3.0.5.1
Hp » Software Update » Version: 3.0.6.3

cpe:2.3:a:hp:software_update:3.0.6.3
Hp » Software Update » Version: 3.0.7.14

cpe:2.3:a:hp:software_update:3.0.7.14
Hp » Software Update » Version: 3.0.8.4

cpe:2.3:a:hp:software_update:3.0.8.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-6506

Products

Pricing

Contact Us