CVE-2012-3274

high · 10

Stack-based buffer overflow in uam.exe in the User Access Manager (UAM) component in HP Intelligent Management Center (IMC) before 5.1 E0101P01 allows remote attackers to execute arbitrary code via vectors related to log data.

CVSS

63.6%

EPSS (exploit prob.)

99th

EPSS percentile

2012-12-06

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
hp	intelligent_management_center	<= 5.1
hp	intelligent_management_center	5.0
hp	intelligent_management_center	5.0
hp	intelligent_management_center	5.0
hp	intelligent_management_center	5.0
hp	intelligent_management_center	5.0
hp	intelligent_management_center	5.0

Check a specific version with /api/v1/cve/match.

References

http://zerodayinitiative.com/advisories/ZDI-12-171/
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03589863
http://zerodayinitiative.com/advisories/ZDI-12-171/
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03589863

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-3274