CVE-2012-0122
HP Data Protector Express Opcode 0x330 Parsing Remote Code Execution Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Unspecified vulnerability in HP Data Protector Express (aka DPX) 5.0.00 before build 59287 and 6.0.00 before build 11974 allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1393.
Vulnerabilidad no especificada en HP Data Protector Express (también conocido como DPX) antes de v5.0.00 build 59287 y v6.0.00 antes de build 11974 permite a atacantes remotos ejecutar código arbitrario o causar una denegación de servicio a través de vectores desconocidos, también conocido como ZDI-CAN-1393.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Express. Authentication is not required to exploit this vulnerability. User interaction is not required to exploit this vulnerability.
The specific flaw exists within the dpwinsdr.exe process which listens on TCP port 3817 by default. The process has insufficient bounds checking on user-supplied data copied to a fixed-length buffer on the stack. Remote, unauthenticated attackers can exploit this vulnerability by sending malformed opcode 0x330 message packets to the target, which could ultimately lead to arbitrary code execution under the context of the SYSTEM user.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2011-12-13 CVE Reserved
- 2012-03-14 CVE Published
- 2024-09-17 CVE Updated
- 2024-09-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.securityfocus.com/archive/1/521944 | 2019-10-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Hp Search vendor "Hp" | Data Protector Express Search vendor "Hp" for product "Data Protector Express" | 5.0 Search vendor "Hp" for product "Data Protector Express" and version "5.0" | - |
Affected
| ||||||
| Hp Search vendor "Hp" | Data Protector Express Search vendor "Hp" for product "Data Protector Express" | 6.0 Search vendor "Hp" for product "Data Protector Express" and version "6.0" | - |
Affected
| ||||||