CVE-2007-0161
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2007-0161
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
HP多个产品PML Driver HPZ12服务本地权限提升漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PML Driver HPZ12服务是很多HP产品(尤其是多合一产品、打印机、扫描仪等)所安装的驱动服务。 PML Driver HPZ12服务在执行权限管理时存在漏洞，本地攻击者可能利用此权限提升自己的权限。 PML Driver HPZ12服务没有设置安全的SERVICE_CHANGE_CONFIG权限。默认下安装该服务时有以下属性： Name: PML Driver HPZ12 Filename: HPZipm12.exe Description: Used by HP Printer/Scanne
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2007-0161
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2007-0161
请登录查看更多情报信息。
- http://secway.org/advisory/AD20070108.txtx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2007-0161
Same Patch Batch · n/a · 2007-01-10 · 14 CVEs total
| CVE-2006-5857 | Adobe Acrobat Reader堆溢出漏洞 | |
| CVE-2006-5858 | Adobe ColdFusion文件名信息泄露漏洞 | |
| CVE-2007-0167 | PPC Search Engine INC Parameter 多个远程文件包含漏洞 | |
| CVE-2006-6143 | MIT Kerberos RPC库xp_auth指针拒绝服务或任意代码执行漏洞 | |
| CVE-2006-6144 | MIT Kerberos kadmind释放初始化指针拒绝服务漏洞 | |
| CVE-2006-6914 | IBM AIX FTPD拒绝服务及信息泄露漏洞 | |
| CVE-2006-6915 | IBM AIX FTPD拒绝服务及信息泄露漏洞 | |
| CVE-2007-0159 | GeoIP 'GeoIPUpdate.C' 目录遍历漏洞 | |
| CVE-2007-0160 | CenterICQ IJHook.CC远程溢出漏洞 | |
| CVE-2007-0162 | Application Enhancer 本地特权提升漏洞 | |
| CVE-2007-0163 | SecureKit Steganography 安全绕过漏洞 | |
| CVE-2007-0164 | Camouflage Security 安全绕过漏洞 | |
| CVE-2007-0165 | Sun Solaris RPC未明漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2007-0161
No comments yet