Security [CENTRAL] Forum - SCforum.info
12. March 2010., 12:58:26 *
Welcome, Guest. Please login or register.

Login with username, password and session length

SCforum.info - Security [CENTRAL] Forum

↑ Grab this Headline Animator

Custom Search
News: Check out Interview with Samker at BlogInterviewer.
 
  Home   Forum   Help Chess Links Login Register   *

SCforum.info




SCF Recent Posts
[12. March 2010., 11:17:37]

[12. March 2010., 11:14:42]

[12. March 2010., 11:12:43]

[12. March 2010., 11:00:19]

[12. March 2010., 10:57:50]

[12. March 2010., 10:55:17]

[12. March 2010., 10:42:20]

[12. March 2010., 10:39:51]

[12. March 2010., 10:34:00]

[12. March 2010., 10:31:59]
SCF Translate


Members
Total Members: 3984
Latest: Fafa1
Stats
Total Posts: 9263
Total Topics: 3033
Online Today: 1188
Online Ever: 51419
(01. January 2010., 11:27:49)
Users Online
Users: 15
Guests: 1306
Total: 1321

Free Internet Security - WOT Web of Trust
Geo Visitors Map
Creative Commons License
Welcome to SCforum.info - Security [CENTRAL] Forum, a home of SCF Community devoted to provide Computer related News, Alerts, Downloads and FREE Help in such a way that even the beginning computer user can understand.

Getting started using our community is extremely easy as two steps below:

Step 1: Create an account by clicking here. It's completely free with no hidden strings attached.

Step 2: If you are having a computer problem and need some computer help or just want to take a part in opened discussions simply visit scForum. Once you *Register an account, you can quickly post your questions and comments.

(*Registered Members get: free support, communicate privately with other members via PM, removal of this message, see fewer ads and much more...)






Pages: 1
  Print  
Author Topic: Security bug in HP support app aids hackers  (Read 686 times)
0 Members and 1 Guest are viewing this topic.
Samker
SCF Administrator
*****

KARMA: 42
Gender: Male
Age: 32
Location: Europe
Posts: 3144


Whatever doesn't kill us makes us stronger.

Google Talk
WWW
« on: 06. June 2008., 09:51:18 »



A customer support application that comes bundled with HP PCs have been found to harbour multiple security vulnerabilities.

The pre-installed software is designed to make it easy for users to keep drivers and HP software automatically updated. But flaws in ActiveX components within HP Instant Support give rise to multiple vulnerabilties that lend themselves to drive-by download malware attacks in cases where Windows users running the vulnerable software stray onto insecure or hacker controlled websites, CSIS Security Group warns.

HP Instant Support HPISDataManager.dll version 1.0.0.22 and earlier are vulnerable. Users need to upgrade to version 1.0.0.24 as explained in a security bulletin from HP here.

A CSIS advisory containing proof of concept demos of the flaws can be found here. And there's an easy to digest bit from Secunia here.

It's not the first trouble HP has had with rogue ActiveX controls in its pre-installed utilities. In December last year two ActiveX bugs created a mechanism for hackers to either thrash or inject hostile code onto HP PCs running either HP Software Update or HP Info Center, respectively.

News Source: The Register
Logged

- Don't miss the latest PC Security news, alerts & downloads. Subscribe to SCF now!

- NO MORE virus, trojans, worms, spyware... MALWARE! Visit SCF 'Remote' PC Help Center!
Security [CENTRAL] Forum - SCforum.info
« on: 06. June 2008., 09:51:18 »



 Logged
Pages: 1
  Print  
 
Jump to:  

Security Sources: Is your computer secured? Visit k7computing.com and install a trusted piece of k7 antivirus software.

Enter your email address to receive daily email with 'SCforum.info - Security CENTRAL Forum' newest content:

Terms of Use | Privacy Policy
Powered by MySQL Powered by PHP Powered by SMF 1.1.11 | SMF © 2006-2009, Simple Machines LLC
TinyPortal v0.9.8 © Bloc
Valid XHTML 1.0! Valid CSS!


Google visited last this page 18. October 2009., 21:06:47