HP software update vulnerable to hacking

Darius Chang | Jan 04, 2008

Editors' note:

HP has issued a security patch through the HP Software Update to address this issue. This patch can also be downloaded from HP support Website.

It is a little ironic that the very software which is supposed to keep your system in tip-top condition turns out to be a possible conduit for hacking. According to a report by ComputerWorld, this is exactly what's happening with HP's Software Update application.

A Polish security researcher who uses the alias "porkythepig" claims that an ActiveX bug in the software allows malicious attackers to delete or corrupt system files, thereby rendering the notebook unable to boot up. He states that HP laptops using Internet Explorer 6 and 7 are vulnerable to this attack. Since HP Software Update is compatible with Windows only, other operating systems are not subject this this exploit. No fix has currently been released, and the advice is to disable the Software Update application till the issue has been resolved. CNET Asia has contacted HP and are awaiting a response.

Filed under: Notebooks
Leave a comment | Bookmark | Share