CVE-2012-3254
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
Multiple unspecified vulnerabilities in HP iNode Management Center before iNode PC 5.1 E0304 allow remote attackers to execute arbitrary code via crafted input, as demonstrated by a stack-based buffer overflow in iNodeMngChecker.exe for a crafted 0x0A0BF007 packet.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: hp-security-alert@hp.com — http://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay/?docId=emr_na-c03473527
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| hp | inode_management_center_pc | {"endIncluding":"5.1"} | |
| hp | inode_management_center_pc | 5.0 | |
References
Verify integrity in audit chain (admin only). AS-IS.