CVE-2009-0714

HP Data Protector Express <4.6.5-3.4.7 - DoS

Title source: llm

Description

Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Nibin · rubydoswindows

https://www.exploit-db.com/exploits/9007

View Code ZIP pw:eip

exploitdb WORKING POC VERIFIED

by Nibin · pythondoswindows

https://www.exploit-db.com/exploits/9006

View Code ZIP pw:eip

References (8)

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1022220

[Vendor Advisory] http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/9007

[Broken Link] http://ivizsecurity.com/security-advisory-iviz-sr-09002.html

[Third Party Advisory] http://secunia.com/advisories/35084

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/34955

[Third Party Advisory] http://www.vupen.com/english/advisories/2009/1309

[Exploit, Third Party Advisory, VDB Entry] https://www.exploit-db.com/exploits/9006

Scores

EPSS 0.8530

EPSS Percentile 99.4%

Details

Status published

Products (2)

hp/data_protector_express 3.5 sp1 (3 CPE variants)

hp/data_protector_express 4.0 sp1 (2 CPE variants)

Published May 14, 2009

Tracked Since Feb 18, 2026