CVE-2009-0714

high

Description

Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.

References

http://www.vupen.com/english/advisories/2009/1309

http://www.securitytracker.com/id?1022220

http://www.securityfocus.com/bid/34955

http://secunia.com/advisories/35084

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543

Details

Source: Mitre, NVD

Published: 2009-05-14

Updated: 2019-10-09

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High