Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-0161. PoCs published by Sowhat.
AI-analyzed exploit summary This exploit leverages a local privilege escalation vulnerability in HP's PML Driver HPZ12 by modifying the service's binary path to execute arbitrary code with SYSTEM privileges. The attack involves reconfiguring the service to point to a malicious executable and then starting the service.
Description
The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.
Exploits (1)
This exploit leverages a local privilege escalation vulnerability in HP's PML Driver HPZ12 by modifying the service's binary path to execute arbitrary code with SYSTEM privileges. The attack involves reconfiguring the service to point to a malicious executable and then starting the service.