Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX…
Priority MEDIUM 57Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607.
Why it matters now
EPSS 0.12809 96th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:* | up to 1.0.0.23 | Vulnerable | Hewlett Packard Enterprise |
- cpe:2.3:a:hp:instant_support:*:*:*:*:*:*:*:* Versions up to 1.0.0.23 Vulnerable ·Hewlett Packard Enterprise
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2007-5606
- 2026-10-03 Alias added: GHSA-5f85-8p5w-q6v9
References
More Hewlett Packard Enterprise Instant Support vulnerabilities
- TI-2008-00915 The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in… CVSS 2.0HIGH 10.0
- TI-2007-05392 The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in… CVSS 2.0HIGH 10.0
- TI-2007-05388 Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX… CVSS 2.0HIGH 9.3
- TI-2007-03447 Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP… CVSS 2.0HIGH 7.6
- TI-2008-00914 The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in… CVSS 2.0HIGH 9.3
- TI-2007-05390 Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX… CVSS 2.0HIGH 7.5
Sources
- CVE-2007-5606 · CVE Program
- CVE-2007-5606 · NVD
- FIRST EPSS
- GHSA-5f85-8p5w-q6v9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences