medium5.0Public exploit code
CVE-2012-3796
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive info…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities2012-05-14 · dos · windows · Verified
Impact
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pro-Face | Pro-Server Ex | through 1.30.000 Versions 1.21.000, 1.23.000, 1.24.200 |
| Pro-Face | Wingp Pc Runtime | through 3.1.00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.org/adv/proservrex_1-adv.txt
- http://ics-cert.us-cert.gov/advisories/ICSA-12-179-01
- http://secunia.com/advisories/49172
- http://www.securityfocus.com/bid/53499
- https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt
- https://www.hmisource.com/otasuke/news/2012/0606.html
- http://aluigi.org/adv/proservrex_1-adv.txt
- http://ics-cert.us-cert.gov/advisories/ICSA-12-179-01
- http://secunia.com/advisories/49172
- http://www.securityfocus.com/bid/53499
- https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt
- https://www.hmisource.com/otasuke/news/2012/0606.html