CVE-2007-6506

no score yetEPSS 16%

hp software update: no CVSS score yet. EPSS 16% chance of exploitation in the next 30 days.

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly (2) access arbitrary files via the LoadDataFromFile method.

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2007-12-20
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

hp:software_update

References

http://blogs.zdnet.com/security/?p=768
http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9053818
http://it.slashdot.org/it/07/12/20/2327242.shtml
http://secunia.com/advisories/28177
http://www.anspi.pl/~porkythepig/hp-issue/wyfukanyszynszyl.txt

Check your stack JSON