CVE-2009-0714

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service (Metasploit)2009-06-23 · dos · windows · Verified
• HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service2009-06-23 · dos · windows · Verified

Impact

Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.

Affected products

References

• NVD record
• CVE.org record
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543
• http://ivizsecurity.com/security-advisory-iviz-sr-09002.html
• http://secunia.com/advisories/35084
• http://www.securityfocus.com/bid/34955
• http://www.securitytracker.com/id?1022220
• http://www.vupen.com/english/advisories/2009/1309
• https://www.exploit-db.com/exploits/9006
• https://www.exploit-db.com/exploits/9007
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543
• http://ivizsecurity.com/security-advisory-iviz-sr-09002.html
• http://secunia.com/advisories/35084
• http://www.securityfocus.com/bid/34955
• http://www.securitytracker.com/id?1022220
• http://www.vupen.com/english/advisories/2009/1309
• https://www.exploit-db.com/exploits/9006
• https://www.exploit-db.com/exploits/9007