CVE-2007-0161

Published: Jan 10, 2007Modified: Apr 23, 2026

4.1

Vector

AV:L/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 2.7 / Impact: 6.4

Source: NVD

Description

The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.

Affected (21)

Products: Hp: Pml Driver Hpz12, Color Laserjet 4650, Officejet 4100, Officejet 5100, Officejet 5500, Officejet 6100, Officejet 7100, Officejet D, Officejet G, Officejet K, Psc 1100, Psc 1200, Psc 1210 All In One, Psc 1300, Psc 2100, Psc 2200, Psc 2400 Photosmart All In One, Psc 2500 Photosmart All In One, Psc 2510 Photosmart, Psc 700, Psc 900

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Hp Pml Driver Hpz12	All versions

Configuration B

20 vulnerable

Vulnerable Software	Affected Versions
Hp Color Laserjet 4650	All versions
Hp Officejet 4100	All versions
Hp Officejet 5100	All versions
Hp Officejet 5500	All versions
Hp Officejet 6100	All versions
Hp Officejet 7100	All versions
Hp Officejet D	All versions
Hp Officejet G	All versions
Hp Officejet K	All versions
Hp Psc 1100	All versions
Hp Psc 1200	All versions
Hp Psc 1210 All In One	All versions
Hp Psc 1300	All versions
Hp Psc 2100	All versions
Hp Psc 2200	All versions
Hp Psc 2400 Photosmart All In One	All versions
Hp Psc 2500 Photosmart All In One	All versions
Hp Psc 2510 Photosmart	All versions
Hp Psc 700	All versions
Hp Psc 900	All versions