CVE-2008-2390

Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the first argument.

CVSS v2.0

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

6.86% chance of exploitation in the next 30 days, 94th percentile

Published

2008-05-21

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/5511

References

• CVE Record
• NVD entry

Related

• CVE-2008-2382
• CVE-2008-2392
• CVE-2008-2374
• CVE-2008-2393
• CVE-2008-2370
• CVE-2008-2394