CVE-2008-2390

medium HPE
CVSS v3 Base Score
6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS Score
5.1%
Exploitation probability in 30 days
Top 10% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
P
Integrity
P
Availability
P
Published: May 21, 2008 (6567 days ago)
Last Modified: April 23, 2026
Vendor: HPE
Source: NVD

Description

Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the first argument.

CWE

CWE-94

Affected Products

hp software update

References

🔗 exchange.xforce.ibmcloud.com 🔗 www.exploit-db.com 🔗 exchange.xforce.ibmcloud.com 🔗 www.exploit-db.com