CVE-2007-0161
The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hp:color_laserjet_4650
- hp:officejet_4100
- hp:officejet_5100
- hp:officejet_5500
- hp:officejet_6100
- hp:officejet_7100
- hp:officejet_d
- hp:officejet_g
- hp:officejet_k
- hp:pml_driver_hpz12
- hp:psc_1100
- hp:psc_1200
- hp:psc_1210_all-in-one
- hp:psc_1300
- hp:psc_2100
- hp:psc_2200
- hp:psc_2400_photosmart_all-in-one
- hp:psc_2500_photosmart_all-in-one
- hp:psc_2510_photosmart
- hp:psc_700
- hp:psc_900