VDB

GCVE-VVD-CERTCC-2007-949587

GCVE-VVD-CERTCC-2007-949587
Advisory Published
Vulnetix · Advisory published June 4, 2008
The HP Online Support Services ActiveX control contains a method called DownloadFile(). This may allow a remote, unauthenticated attacker to download files to the location of the ActiveX control.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact12population15exploitation5widely_known17score_current7.02ease_of_exploitation16
certcc-vrda
certcc-vrda
d1_impact2d1_population3d1_direct_report1

Aliases

CVE-2008-0953CVE-2007-5605CVE-2007-5604CVE-2008-0952CVE-2007-5606CVE-2007-5607CVE-2007-5610CVE-2007-5608

Transitive aliases

GHSA-5f85-8p5w-q6v9GHSA-9xhf-xpf3-3rx2GSD-2007-5610GHSA-f469-v24c-6rxvGSD-2008-0952VVD-CERTCC-2007-558163VVD-CERTCC-2007-754403GSD-2008-0953VVD-CERTCC-2007-190939VVD-CERTCC-2007-526131GSD-2007-5608VVD-CERTCC-2007-998779GHSA-mmgq-h7pc-9qc3GSD-2007-5605GHSA-r9rr-8ghm-9j5gVVD-CERTCC-2007-221123GHSA-f7cf-4vwj-vvw2GSD-2007-5604GSD-2007-5606GHSA-g6f2-vq83-q999VVD-CERTCC-2007-857539GSD-2007-5607GHSA-c9m8-8cfg-x353

References

HP Online Support Services ActiveX DownloadFile() arbitrary file download
advisory
HP Online Support Services ActiveX DownloadFile() arbitrary file download
url
HP Online Support Services ActiveX DownloadFile() arbitrary file download
url

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›