hp-support-head-portlet

動作
正在載入...

歡迎使用HP顧客支援

hp-contact-secondary-navigation-portlet

動作
正在載入...

hp-share-print-widget-portlet

動作
正在載入...

hp-concentra-wrapper-portlet

動作
正在載入...

SUPPORT COMMUNICATION- SECURITY BULLETIN

文件 ID: c01131412

版本: 1

HPSBPI02226 SSRT061274 rev.1 ─ 在 HP 筆記型電腦 (執行 Windows XP) 上執行的 HP 說明及支援中心,遠端無授權存取

Notice:: The information in this security bulletin should be acted upon as soon as possible.

發行日期 : 07-Aug-2007

上次更新日期 : 10-Jan-2008

Potential Security Impact:
遠端無授權存取

Source:HP, HP Product Security Response Team (PSRT)

弱點摘要
在 HP 筆記型電腦 (執行 Windows XP) 上執行的 HP 說明及支援中心內,發現會讓遠端利用進行無授權存取系統的潛在安全性漏洞。
參考編號
CVE-2007-3180
支援的軟體版本*: 此處只有列出受影響的版本。
在 HP 筆記型電腦 (執行 Microsoft Windows XP、XP Professional、XP Home Edition、XP Tablet PC Edition) 上執行 4.4C 版以前的 HP 說明及支援中心 (HP Help and Support Center)
背景
此問題僅會發生在其 HP 說明及支援中心是早於 4.4 C 版的 HP 筆記型電腦。
欲使用「新增/移除程式」得知 HP 說明及支援中心版本:
  1. 按一下「開始」
  2. 按一下「控制台」
  3. 按一下「新增或移除程式」
  4. 捲動至「HP 說明及支援」
  5. 按一下「按這裡取得支援資訊」連結
  6. 隨即顯示版本編號。
注意: 若在「新增/移除程式」清單中找不到 HP 說明及支援,無需繼續採取任何措施。
HP 公司謹此感謝 Juniper Networks J-Security Research Labs 的 Karl Lynn 將此安全性漏洞報告到 security-alert@hp.com
解決方案
HP 提供下列可以解決此安全性漏洞的軟體更新:

HP 說明及支援中心 v4.4 C 或更新版
您可以在 HP 顧客貼心服務網站下載已更新的 HP 說明及支援中心軟體。 請在按一下下列連結後選取適當的語言: http://h10025.www1.hp.com/ewfrf/wc/genericSoftwareDownloadIndex?softwareitem=ob-48738-1&jumpid=reg_R1002_USEN
產品特定資訊
版本記錄:
版別:1 (rev.1) ─ 2007 年 6 月 18 日初版
協力廠商安全性補強程式: 在執行 HP 軟體產品系統上安裝協力廠商安全性補強程式時,請務必遵循客戶的補強程式管理規定。
System management and security procedures must be reviewed frequently to maintain system integrity. HP is continually reviewing and enhancing the security features of software products to provide customers with current secure solutions.

"HP is broadly distributing this Security Bulletin in order to bring to the attention of users of the affected HP products the important security information contained in this Bulletin.HP recommends that all users determine the applicability of this information to their individual situations and take appropriate action.HP does not warrant that this information is necessarily accurate or complete for all user situations and, consequently, HP will not be responsible for any damages resulting from user's use or disregard of the information provided in this Bulletin.To the extent permitted by law, HP disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose, title and non-infringement."

HP Inc. shall not be liable for technical or editorial errors or omissions contained herein.The information provided is provided "as is" without warranty of any kind.To the extent permitted by law, neither HP or its affiliates, subcontractors or suppliers will be liable for incidental, special or consequential damages including downtime cost; lost profits; damages relating to the procurement of substitute products or services; or damages for loss of data, or software restorationThe information in this document is subject to change without notice.HP Inc. and the names of HP products referenced herein are trademarks of HP Inc. in the United States and other countries.Other product and company names mentioned herein may be trademarks of their respective owners.

hp-feedback-input-portlet

動作
正在載入...

hp-online-communities-portlet

動作
正在載入...

hp-feedback-banner-portlet

動作
正在載入...

hp-country-locator-portlet

動作
正在載入...
國家: 台灣

hp-detect-load-my-device-portlet

動作
正在載入...