Lucene search

[email protected]CVE-2007-0161

HistoryJan 10, 2007 - 12:28 a.m.

CVE-2007-0161

2007-01-1000:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

all-in-one

drivers

cve-2007-0161

privilege escalation

arbitrary program execution

7.3 High

AI Score

Confidence

Low

4.1 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

0.4%

JSON

The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.

CPENameOperatorVersion
hp:pml_driver_hpz12hp pml driver hpz12eq*
hp:officejet_4100hp officejet 4100eq*
hp:psc_900hp psc 900eq*
hp:psc_1300hp psc 1300eq*
hp:psc_2100hp psc 2100eq*
hp:officejet_7100hp officejet 7100eq*
hp:officejet_5500hp officejet 5500eq*
hp:officejet_6100hp officejet 6100eq*
hp:officejet_khp officejet keq*
hp:psc_1100hp psc 1100eq*

CPE	Name	Operator	Version
hp:pml_driver_hpz12	hp pml driver hpz12	eq	*
hp:officejet_4100	hp officejet 4100	eq	*
hp:psc_900	hp psc 900	eq	*
hp:psc_1300	hp psc 1300	eq	*
hp:psc_2100	hp psc 2100	eq	*
hp:officejet_7100	hp officejet 7100	eq	*
hp:officejet_5500	hp officejet 5500	eq	*
hp:officejet_6100	hp officejet 6100	eq	*
hp:officejet_k	hp officejet k	eq	*
hp:psc_1100	hp psc 1100	eq	*

Rows per page:

1-10 of 211

References

osvdb.org/32654

secunia.com/advisories/23663

securityreason.com/securityalert/2128

secway.org/advisory/AD20070108.txt

www.securityfocus.com/archive/1/456259/100/0/threaded

www.securityfocus.com/bid/21935

www.vupen.com/english/advisories/2007/0094

exchange.xforce.ibmcloud.com/vulnerabilities/31361

7.3 High

AI Score

Confidence

Low

4.1 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:S/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

0.4%

JSON

Related for CVE-2007-0161

prion2 securityvulns2 cve1 nessus1 cert1