CVE-2012-3797 Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reusing packet memory buffers, which allows r...
HighCVSS 10.0
EPSS 12.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reusing packet memory buffers, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a short crafted packet with a certain opcode.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pro-face pro-server ex | <= 1.30.000 | No fix listed |
| pro-face pro-server ex | = 1.21.000 | No fix listed |
| pro-face pro-server ex | = 1.23.000 | No fix listed |
| pro-face pro-server ex | = 1.24.200 | No fix listed |
| pro-face wingp pc runtime | <= 3.1.00 | No fix listed |
References
- aluigi.org
- ics-cert.us-cert.gov
- 49172 third-party-advisory
- 53499 vdb-entry
- www.hmisource.com
- www.hmisource.com vendor-advisory