Buffer Overflow in HP Instant Support ActiveX Control

CVE-2007-5604

Summary

The HPISDataManagerLib.Datamgr ActiveX control in HP Instant Support contains a buffer overflow vulnerability in its ExtractCab function. This flaw can be exploited by remote attackers who supply a specially crafted input as the first argument, allowing them to execute arbitrary code on the affected system. This vulnerability is distinct from others identified in the same timeframe and requires immediate attention for systems relying on outdated versions of the software.

References