CVE-2012-3794 Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (unhandled exception and daemon cras...
MediumCVSS 5.0
EPSS 21.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service (unhandled exception and daemon crash) via a crafted packet with a certain opcode that triggers an invalid attempt to allocate a large amount of memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pro-face pro-server ex | <= 1.30.000 | No fix listed |
| pro-face pro-server ex | = 1.21.000 | No fix listed |
| pro-face pro-server ex | = 1.23.000 | No fix listed |
| pro-face pro-server ex | = 1.24.200 | No fix listed |
| pro-face wingp pc runtime | <= 3.1.00 | No fix listed |
References
- aluigi.org exploit
- ics-cert.us-cert.gov
- 49172 third-party-advisory
- 53499 vdb-entry
- proserverex-exception-dos(75551) vdb-entry
- www.hmisource.com
- www.hmisource.com vendor-advisory