Secunia

A vulnerability has been reported in HP Instant Support Driver Check, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error when processing the "queryHub()" function in sdd.dll. This can be exploited to cause a buffer overflow via an overly long string passed to the affected function when a user visits a malicious web page.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in versions prior to 1.5.0.3.

Solution
Update to version 1.5.0.3.

Provided and/or discovered by
The vendor credits John Heasman of NGSSoftware and Carlo Di Dato a.k.a. shinnai.

Changelog
Further details available in Customer Area

Original Advisory
HP:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01077597

Shinnai:
http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Exploits&argument=Remote&topic=1183360239.ff.php&page=last

Deep Links
Links available in Customer Area