CVE-2007-0161 The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and...
MediumCVSS 4.1
EPSS 0.74%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc pml driver hpz12 | All versions | No fix listed |
| HP Inc color laserjet 4650 | All versions | No fix listed |
| HP Inc officejet 4100 | All versions | No fix listed |
| HP Inc officejet 5100 | All versions | No fix listed |
| HP Inc officejet 5500 | All versions | No fix listed |
| HP Inc officejet 6100 | All versions | No fix listed |
| HP Inc officejet 7100 | All versions | No fix listed |
| HP Inc officejet d | All versions | No fix listed |
| HP Inc officejet g | All versions | No fix listed |
| HP Inc officejet k | All versions | No fix listed |
| HP Inc psc 1100 | All versions | No fix listed |
| HP Inc psc 1200 | All versions | No fix listed |
| HP Inc psc 1210 all-in-one | All versions | No fix listed |
| HP Inc psc 1300 | All versions | No fix listed |
| HP Inc psc 2100 | All versions | No fix listed |
| HP Inc psc 2200 | All versions | No fix listed |
| HP Inc psc 2400 photosmart all-in-one | All versions | No fix listed |
| HP Inc psc 2500 photosmart all-in-one | All versions | No fix listed |
| HP Inc psc 2510 photosmart | All versions | No fix listed |
| HP Inc psc 700 | All versions | No fix listed |
| HP Inc psc 900 | All versions | No fix listed |
References
- 32654 vdb-entry
- 23663 third-party-advisory vendor-advisory
- 2128 third-party-advisory
- secway.org vendor-advisory
- 20070108 HP Multiple Products PML Driver Local Privilege Escalation mailing-list
- 21935 exploit vdb-entry
- ADV-2007-0094 vdb-entry
- pml-driver-config-privilege-escalation(31361) vdb-entry