PT-2007-5892 · Hewlett Packard · Hp.Revolution.Registrymanager.Dll

Rgod

·

CVE-2007-4740

·

Publicado

2007-09-06

·

Atualizado

2018-10-15

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Hp.Revolution.RegistryManager.dll version 1
Description: The issue allows remote attackers to create registry keys and values via the arguments to the WriteRegistry method in the HPRevolutionRegistryManager ActiveX control.
Recommendations: For Hp.Revolution.RegistryManager.dll version 1, consider disabling the WriteRegistry method until a patch is available to prevent remote attackers from creating registry keys and values.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-4740

Produtos afetados

Hp.Revolution.Registrymanager.Dll