$ cve CVE-2007-0161 JSON

CVE-2007-0161 EXPLOIT

4.1

MEDIUM · CVSS 2.0 · EPSS 0.7% (pctl 54)

Patch early

A public exploit exists.

Description

The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.

Scoring

CVSS	4.1 (MEDIUM, v2.0)
Vector	AV:L/AC:M/Au:S/C:P/I:P/A:P
EPSS	0.74% — more likely to be exploited than 54% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-01-10
Last modified	2026-06-16

Affected (21)

Vendor	Product
hp	color laserjet 4650
hp	officejet 4100
hp	officejet 5100
hp	officejet 5500
hp	officejet 6100
hp	officejet 7100
hp	officejet d
hp	officejet g
hp	officejet k
hp	pml driver hpz12
hp	psc 1100
hp	psc 1200
hp	psc 1210 all-in-one
hp	psc 1300
hp	psc 2100
hp	psc 2200
hp	psc 2400 photosmart all-in-one
hp	psc 2500 photosmart all-in-one
hp	psc 2510 photosmart
hp	psc 700
hp	psc 900

Public exploits

Source	Title	Date
exploit-db	HP (Multiple Products) - PML Driver HPZ12 Privilege Escalation	2007-01-08

References

→ the Explorer · watch your stack · NVD