CVE-2012-3278 Stack-based buffer overflow in magentservice.exe in HP Diagnostics Server 8.x through 8.07 and 9.x through 9.21 allows remote attackers to execute arbitrary code via a malformed message packet.
HighCVSS 10.0
EPSS 11.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in magentservice.exe in HP Diagnostics Server 8.x through 8.07 and 9.x through 9.21 allows remote attackers to execute arbitrary code via a malformed message packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc diagnostics server | = 8.00 | No fix listed |
| HP Inc diagnostics server | = 8.01 | No fix listed |
| HP Inc diagnostics server | = 8.02 | No fix listed |
| HP Inc diagnostics server | = 8.03 | No fix listed |
| HP Inc diagnostics server | = 8.04 | No fix listed |
| HP Inc diagnostics server | = 8.05 | No fix listed |
| HP Inc diagnostics server | = 8.06 | No fix listed |
| HP Inc diagnostics server | = 8.07 | No fix listed |
| HP Inc diagnostics server | = 9.00 | No fix listed |
| HP Inc diagnostics server | = 9.01 | No fix listed |
| HP Inc diagnostics server | = 9.02 | No fix listed |
| HP Inc diagnostics server | = 9.10 | No fix listed |
| HP Inc diagnostics server | = 9.12 | No fix listed |
| HP Inc diagnostics server | = 9.20 | No fix listed |
| HP Inc diagnostics server | = 9.21 | No fix listed |
References
- www.zerodayinitiative.com
- SSRT100724 vendor-advisory