critical10.0Public exploit code
CVE-2012-3797
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reus…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities2012-05-14 · dos · windows · Verified
Impact
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reusing packet memory buffers, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a short crafted packet with a certain opcode.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pro-Face | Pro-Server Ex | through 1.30.000 Versions 1.21.000, 1.23.000, 1.24.200 |
| Pro-Face | Wingp Pc Runtime | through 3.1.00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.org/adv/proservrex_1-adv.txt
- http://ics-cert.us-cert.gov/advisories/ICSA-12-179-01
- http://secunia.com/advisories/49172
- http://www.securityfocus.com/bid/53499
- https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt
- https://www.hmisource.com/otasuke/news/2012/0606.html
- http://aluigi.org/adv/proservrex_1-adv.txt
- http://ics-cert.us-cert.gov/advisories/ICSA-12-179-01
- http://secunia.com/advisories/49172
- http://www.securityfocus.com/bid/53499
- https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt
- https://www.hmisource.com/otasuke/news/2012/0606.html