HP Data Protector Notebook Extension Remote Arbitrary Code Execution Vulnerability

Release date: 2011-10-21
Updated on: 2011-10-21

Affected Systems:
HP ata Protector Notebook extension7.0
HP ata Protector Notebook extension6.20
Description:
--------------------------------------------------------------------------------
Cve id: CVE-2011-3156, CVE-2011-3157, CVE-2011-3158, CVE-2011-3159, CVE-2011-3160, CVE-2011-3161

HP Data Protector Notebook Extension is a laptop backup software.

HP Data Protector Notebook Extension has a remote code execution vulnerability. Malicious users can exploit this vulnerability to execute arbitrary code.

<* Source: HP

Link: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay? DocId = emr_na-c02964430
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

HP
--
HP has released a Security Bulletin (HPSBMU02716) and corresponding patches for this:

HPSBMU02716: HPSBMU02716 SSRT100651 rev.1-HP Data Protector Notebook Extension, Remote Execution of Arbitrary Code

Link: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay? DocId = emr_na-c02964430