Bardissi Enterprises Blog

Severity: High

5 June, 2008

Summary:

• This vulnerability affects: Hewlett-Packard desktop and laptop computers running Windows
• How an attacker exploits it: By luring one of your users to a maliciously crafted website, where a drive-by download occurs
• Impact: The attacker can take complete control of your user’s computer
• What to do: Either set the kill bit for the vulnerable ActiveX control, or update your HP Instant Support software to version 1.0.0.24

Exposure:

Hewlett-Packard (HP) is the world’s largest PC dealer. HP has sold millions of desktop and laptop computers, and according to industry observers, accounts for as much as 20 percent of the PC market. Somewhere among your users, it is probable that an HP computer regularly connects to your network. If you have no HP computers on your network, this security alert does not pertain to you.

Posted Apr 03 2008, 04:18 PM by Kim Peterson

Customization is a big business these days. Starbucks says it can customize 87,000 drink combinations for its patrons. Whether it be clothes, cars or gadgets, allowing customers to order a unique version is becoming a successful business model.

Not so for Dell, a company who made a name for itself on its build-your-own-PC policy. This week, the company said it will focus less on the build-to-order model and more on selling pre-built versions. The switch is part of the company’s mission to bring down costs.

When it comes to computers, people don’t need an extreme level of customization anymore, executives told analysts this week. Customers are giving up the luxury of picking their own computer features and opting for cheaper, pre-made PCs from other companies. Dell’s share of the worldwide PC market has slipped to under 13% from 19% in 2006, and it has lost the title of top computer maker to Hewlett-Packard. Its growth has slowed to a trickle, while HP’s 2007 growth could hit 30%.