Secunia

Some vulnerabilities have been reported in HP Software Update, which can be exploited by malicious people to disclose certain information or compromise a vulnerable system.

1) A boundary error in the HPeSupportDiags.HPIniFileUtil.1 ActiveX control (HPeDiag.dll) when handling the "GetXmlFromIni()" method can be exploited to cause a stack-based buffer overflow.

Successful exploitation allows execution of arbitrary code.

2) Insecure methods in certain ActiveX controls (e.g. HPeSupportDiags.HPRegUtil.1, HPeSupportDiags.HPFileUtil.1, HPeSupportDiags.HPSystemBoardInfo.1, HPeSupportDiags.HPOperatingSystem.1) can be exploited to e.g. read registry entries, read text files, or retrieve system and OS information.

The vulnerabilities are reported in versions 4.000.009.002 and prior.

Solution
Update to version 4.000.010.008 (see vendor's advisory for details).

Provided and/or discovered by
Tan Chew Keong

Changelog
Further details available in Customer Area

Original Advisory
HPSBGN02333 SSRT080031:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01439758

Tan Chew Keong:
http://vuln.sg/hpupdate302991-en.html

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area