Vulnerabilities > CVE-2007-0161 - Products PML Driver HPZ12 Local Privilege Escalation vulnerability in HP

CVSS 4.1 - MEDIUM

Attack vector

LOCAL

Attack complexity

MEDIUM

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

exploit available

NVD

Published: 2007-01-10

Updated: 2018-10-16

Summary

The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.

Vulnerable Configurations

Part	Description	Count
Application	Hp HP PML Driver Hpz12 *	1
Hardware	Hp HP Color Laserjet 4650 * HP Officejet 4100 * HP Officejet 5100 * HP Officejet 5500 * HP Officejet 6100 * HP Officejet 7100 * HP Officejet D * HP Officejet G * HP Officejet K * HP PSC 1100 * HP PSC 1200 * HP PSC 1210 ALL IN ONE * HP PSC 1300 * HP PSC 2100 * HP PSC 2200 * HP PSC 2400 Photosmart ALL IN ONE * HP PSC 2500 Photosmart ALL IN ONE * HP PSC 2510 Photosmart * HP PSC 700 * HP PSC 900 *	20

Exploit-Db

description	HP Multiple Products PML Driver HPZ12 Local Privilege Escalation Vulnerability. CVE-2007-0161. Local exploit for windows platform
id	EDB-ID:29403
last seen	2016-02-03
modified	2007-01-08
published	2007-01-08
reporter	Sowhat
source	https://www.exploit-db.com/download/29403/
title	HP Multiple Products PML Driver HPZ12 - Local Privilege Escalation Vulnerability

Summary

Vulnerable Configurations

Exploit-Db

References