peter bassill · operator
$ cve CVE-2007-3872 JSON

CVE-2007-3872 EXPLOIT

6.8
MEDIUM · CVSS 2.0 · EPSS 30.3% (pctl 98)

Patch early

A public exploit exists.

Description

Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.

Scoring

CVSS6.8 (MEDIUM, v2.0)
VectorAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS30.28% — more likely to be exploited than 98% of all CVEs
On CISA KEVno
Public exploityes
Published2007-08-09
Last modified2026-06-16

Affected (2)

VendorProduct
hpopenview operations
hpshared trace service

Public exploits

SourceTitleDate
exploit-dbHP OpenView - Operations OVTrace Buffer Overflow (Metasploit)2010-06-22

References

→ the Explorer  ·  watch your stack  ·  NVD