Zero-day flaw haunts HP laptop models

Snuffy · 12-13-2007, 10:19 PM

Zero-day flaw haunts HP laptop models
12-12-07
Ryan Naraine: A zero-day hole in several major HP laptop models could provide an easy way for hackers to take complete control of Windows machines, according to an independent researcher.

A zero-day hole is several major HP laptop models could provide an easy way for hackers to take complete control of Windows machines, according to a warning from an independent security researcher.

The researcher, known as “porkythepig,” discovered the vulnerability in the HP Info Center software that’s preinstalled on multiple HP Compaq notebook series to allow one-touch access to features.

The skinny from a detailed advisory:

One of [the software’s] ActiveX controls deployed by default by the vendor has three insecure methods that allow a malicious person to target the HP notebook machines for a remote code execution and remote registry manipulation based attacks.

http://blogs.zdnet.com/security/?p=737

**CrowdAds** · [Remove Advertisement]

Znod · 12-14-2007, 12:20 AM

Yep, I saw that. Fortunately, my new HP is not among those with the problem. Thanks for posting.

12-13-2007, 10:19 PM	#1
Snuffy Elite Members Join Date: Nov 2006 Location: S.W. Kansas Posts: 2,841	Zero-day flaw haunts HP laptop models Zero-day flaw haunts HP laptop models 12-12-07 Ryan Naraine: A zero-day hole in several major HP laptop models could provide an easy way for hackers to take complete control of Windows machines, according to an independent researcher. A zero-day hole is several major HP laptop models could provide an easy way for hackers to take complete control of Windows machines, according to a warning from an independent security researcher. The researcher, known as “porkythepig,” discovered the vulnerability in the HP Info Center software that’s preinstalled on multiple HP Compaq notebook series to allow one-touch access to features. The skinny from a detailed advisory: One of [the software’s] ActiveX controls deployed by default by the vendor has three insecure methods that allow a malicious person to target the HP notebook machines for a remote code execution and remote registry manipulation based attacks. http://blogs.zdnet.com/security/?p=737 __________________ [COLOR="DarkRed"]The only Stupid Question is the one you failed to Ask![/color] [COLOR="Blue"]Beta Tester since Pre Win 95.[/COLOR]
(Offline)

12-14-2007, 12:20 AM	#2
Znod ABXpert Join Date: Jul 2006 Location: Phoenix AZ Posts: 3,136	Yep, I saw that. Fortunately, my new HP is not among those with the problem. Thanks for posting. __________________ [CENTER][sigpic][/sigpic] [COLOR="DeepSkyBlue"][/COLOR][URL=http://homepage.mac.com/donv1/.Pictures/Vista/Bannerxx.jpg][B]Larger Sig Pic Linked Here[/B][/URL][/CENTER]
(Offline)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode