VDB
CVE-2008-0952
CVE-2008-0952
PUBLISHED
CVSS 9.300000190734863 CRITICAL
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953.
EPSS 7.02% · 91.6th percentile
Risk Scores
CVSS 2.0
9.300000190734863
EPSS Score
7.02%
91.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | * |
| hp | instant_support | 0 |
Timeline
- Jun 3, 2008 PoC Published
- Jun 4, 2008 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Oct 30, 2023 EPSS Score
References
- 30516 third-party-advisory
- HPSBMA02326 vendor-advisory
- VU#190939 third-party-advisory
- 29526 vdb
- ADV-2008-1740 vdb
- http://www.csis.dk/dk/forside/CSIS-RI-0003.pdf url
- hp-instantsupport-append-file-overwrite(42834) vdb
- 1020165 vdb
- 29535 vdb
- https://nvd.nist.gov/vuln/detail/CVE-2008-0952 advisory