Zero-day flaw haunts HP laptop models Vista News Discuss Zero-day flaw haunts HP laptop models in the Windows Vista forums; Zero-day flaw haunts HP laptop models 12-12-07 Ryan Naraine: A zero-day hole in several major HP laptop models could provide an easy way for hackers to ...

[Snuffy]

Zero-day flaw haunts HP laptop models
12-12-07
Ryan Naraine: A zero-day hole in several major HP laptop models could provide an easy way for hackers to take complete control of Windows machines, according to an independent researcher.

A zero-day hole is several major HP laptop models could provide an easy way for hackers to take complete control of Windows machines, according to a warning from an independent security researcher.

The researcher, known as “porkythepig,” discovered the vulnerability in the HP Info Center software that’s preinstalled on multiple HP Compaq notebook series to allow one-touch access to features.

The skinny from a detailed advisory:

One of [the software’s] ActiveX controls deployed by default by the vendor has three insecure methods that allow a malicious person to target the HP notebook machines for a remote code execution and remote registry manipulation based attacks.

http://blogs.zdnet.com/security/?p=737

[Znod]

Yep, I saw that. Fortunately, my new HP is not among those with the problem. Thanks for posting.