CVE-2012-3792 Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (out-of-bounds read operation) via a...
MediumCVSS 5.0
EPSS 10.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (out-of-bounds read operation) via a crafted packet that triggers a certain Find Node check attempt.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pro-face pro-server ex | <= 1.30.000 | No fix listed |
| pro-face pro-server ex | = 1.21.000 | No fix listed |
| pro-face pro-server ex | = 1.23.000 | No fix listed |
| pro-face pro-server ex | = 1.24.200 | No fix listed |
| pro-face wingp pc runtime | <= 3.1.00 | No fix listed |
References
- aluigi.org exploit
- ics-cert.us-cert.gov
- 49172 third-party-advisory
- 53499 vdb-entry
- www.hmisource.com
- www.hmisource.com vendor-advisory