VULNERABILITY INTELLIGENCE
CVE-2008-2390
CVSS score6.8 MEDIUM
EPSS probability6.86%
CISA KEVNot currently listed
Published2008-05-21
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Hpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute methods, which allows remote attackers to execute arbitrary code via an absolute pathname in the first argument.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')