CVE-2007-3554

Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check before 1.5.0.3 allows remote attackers to execute arbitrary code via a long argument to the queryHub function.

• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01077597
• http://osvdb.org/37832
• http://secunia.com/advisories/25918Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/472728/100/0/threaded
• http://www.securityfocus.com/bid/24730Exploit
• http://www.securitytracker.com/id?1018331
• http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Exploits&argument=Remote&topic=1183360239.ff.php&page=lastPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/2413
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35228
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01077597
• http://osvdb.org/37832
• http://secunia.com/advisories/25918Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/472728/100/0/threaded
• http://www.securityfocus.com/bid/24730Exploit
• http://www.securitytracker.com/id?1018331
• http://www.shinnai.altervista.org/index.php?mod=02_Forum&group=Exploits&argument=Remote&topic=1183360239.ff.php&page=lastPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/2413
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35228

Published

Jul 4, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-3548Stack-based buffer overflow in W3Filer 2.1.3 allows remote F…
• CVE-2007-3549SQL injection vulnerability in view_sub_cat.php in Buddy Zon…
• CVE-2007-3550Microsoft Internet Explorer 6.0 and 7.0 allows remote attack…
• CVE-2007-3551Buffer overflow in bbs100 before 3.2 allows remote attackers…
• CVE-2007-3552Multiple unspecified vulnerabilities in bbs100 before 3.2 al…
• CVE-2007-3553Cross-site scripting (XSS) vulnerability in Rapid Install We…
• CVE-2007-3555Cross-site scripting (XSS) vulnerability in index.php in Moo…
• CVE-2007-3556Liesbeth base CMS stores sensitive information under the web…
• CVE-2007-3557SQL injection vulnerability in admin/login.php in Wheatblog …
• CVE-2007-3558SQL injection vulnerability in Coppermine Photo Gallery (CPG…
• CVE-2007-3559Cross-site scripting (XSS) vulnerability in infusions/shoutb…
• CVE-2007-3560Multiple unspecified vulnerabilities in Esqlanelapse before …