CVE-2012-3793 Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (daemon crash) v...
MediumCVSS 5.0
EPSS 11.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (daemon crash) via a crafted packet with a certain opcode that triggers an incorrect memory allocation and a buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pro-face pro-server ex | <= 1.30.000 | No fix listed |
| pro-face pro-server ex | = 1.21.000 | No fix listed |
| pro-face pro-server ex | = 1.23.000 | No fix listed |
| pro-face pro-server ex | = 1.24.200 | No fix listed |
| pro-face wingp pc runtime | <= 3.1.00 | No fix listed |
References
- aluigi.org exploit
- ics-cert.us-cert.gov
- 49172 third-party-advisory
- 53499 vdb-entry
- proserverex-overflow-dos(75547) vdb-entry
- www.hmisource.com
- www.hmisource.com vendor-advisory