VDB

GCVE-VVD-CERTCC-2007-998779

GCVE-VVD-CERTCC-2007-998779
Advisory PublishedCVSS 0.0/10
Vulnetix · Advisory published June 4, 2008
The HP Online Support Services ActiveX control contains a method called StartApp(). This may allow a remote, unauthenticated attacker to execute local files on a vulnerable system in the context of the local user.
Download JSON Open in Console

Risk Scores

CVSS 2.0
0.0/10
None · AV:--/AC:--/Au:--/C:--/I:--/A:--
certcc-cam
certcc-cam
impact13population15exploitation5widely_known17score_current7.605ease_of_exploitation16
certcc-vrda
certcc-vrda
d1_impact2d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score0remediation_levelNDreport_confidenceNDenvironmental_score0target_distributionNDenvironmental_vectorCDP:ND/TD:ND/CR:ND/IR:ND/AR:ND

Aliases

CVE-2007-5607CVE-2008-0952CVE-2007-5606CVE-2008-0953CVE-2007-5608CVE-2007-5610CVE-2007-5605CVE-2007-5604

Transitive aliases

GHSA-f469-v24c-6rxvGSD-2007-5606VVD-CERTCC-2007-857539GSD-2007-5605VVD-CERTCC-2007-949587VVD-CERTCC-2007-526131GSD-2008-0953GSD-2007-5608VVD-CERTCC-2007-558163GSD-2007-5604GHSA-9xhf-xpf3-3rx2GSD-2007-5610GHSA-r9rr-8ghm-9j5gVVD-CERTCC-2007-221123VVD-CERTCC-2007-754403GSD-2008-0952GHSA-5f85-8p5w-q6v9GHSA-g6f2-vq83-q999GHSA-mmgq-h7pc-9qc3GSD-2007-5607GHSA-c9m8-8cfg-x353VVD-CERTCC-2007-190939GHSA-f7cf-4vwj-vvw2

References

HP Online Support Services ActiveX StartApp() arbitrary code execution
advisory
HP Online Support Services ActiveX StartApp() arbitrary code execution
url
HP Online Support Services ActiveX StartApp() arbitrary code execution
url

Browse GCVE Records

72,148 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›