GCVE-110-CERTCC-2007-949587

Advisory Published

Vulnetix · Advisory published June 4, 2008

The HP Online Support Services ActiveX control contains a method called DownloadFile(). This may allow a remote, unauthenticated attacker to download files to the location of the ActiveX control.

Download JSON Open in Console

Risk Scores

certcc-cam

impact12population15exploitation5widely_known17score_current7.02ease_of_exploitation16

certcc-vrda

d1_impact2d1_population3d1_direct_report1

Aliases

CVE-2007-5604 CVE-2007-5605 CVE-2007-5606 CVE-2007-5607 CVE-2007-5608 CVE-2007-5610 CVE-2008-0952 CVE-2008-0953

References

HP Online Support Services ActiveX DownloadFile() arbitrary file download

advisory

HP Online Support Services ActiveX DownloadFile() arbitrary file download

url

HP Online Support Services ActiveX DownloadFile() arbitrary file download

url

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON