December 12, 2007
@ 05:25 PM

I had blogged about this a few months back: http://blog.justinho.com/2007/08/10/JunkInThePreload.aspx

But it seems like someone's gone to the trouble of making them look silly as well.

December 12, 2007 (Computerworld) -- Nearly two-dozen different laptop models sold by Hewlett-Packard Co. ship with software plagued with multiple zero-day vulnerabilities, security researchers said today.

The bugs are in an ActiveX control included with the HP Info Center software preinstalled on both HP- and Compaq-branded laptops running Windows 2000, XP, Server 2003 and Vista, Symantec Corp. said in a note to clients of its DeepSight threat network. Info Center is a part of HP's Quick Launch Buttons application, which gives users one-click access to information and configuration details on the portables.

"One of its ActiveX controls deployed by default by the vendor has three insecure methods that allow a malicious person to target the HP notebook machines for a remote code execution- and remote registry manipulation-based attacks," said a researcher using the alias "porkythepig" in posts to both milw0rm.com and the Bugtraq security mailing list.

Affected: HP 510 and 530; the Compaq 2710, 2510, 6120, 6220, 6230, 6325, 6510, 6715, 6910, 7300, 8220, 8230, 8440, 8510, 8710 and 9440; and the NC, NW and NX series notebooks.

More: http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9052758&source=rss_news10


 
Comments are closed.