Information disclosure in Pro-face Pro-server_ex
CVE-2012-3796
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode.
Vulnerability class: Information Disclosure
EPSS: 0.136 (94.4th percentile) — read the EPSS interpretation.
Affected products
- Pro-face Pro-server_ex — versions 1.21.000, 1.23.000, 1.24.200
- Pro-face Wingp_pc_runtime
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)
- 53499 (vdb-entry, x_refsource_BID)
- 49172 (x_refsource_SECUNIA, third-party-advisory)