medium4.1Public exploit code

CVE-2007-0161

The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

HP (Multiple Products) - PML Driver HPZ12 Privilege Escalation2007-01-08 · local · windows · Verified

Impact

The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.

Affected products

Vendor	Product	Affected versions
Hp	Pml Driver Hpz12	All versions
Hp	Color Laserjet 4650	All versions
Hp	Officejet 4100	All versions
Hp	Officejet 5100	All versions
Hp	Officejet 5500	All versions
Hp	Officejet 6100	All versions
Hp	Officejet 7100	All versions
Hp	Officejet D	All versions
Hp	Officejet G	All versions
Hp	Officejet K	All versions
Hp	Psc 1100	All versions
Hp	Psc 1200	All versions

Public exploit code

Impact

Affected products

References