What’s Vulnerable › Vulnerabilities

CVE-2007-0161

• Severity: medium (CVSS 4.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2007-01-10 · updated 2026-06-16

Description

The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.

Affected products

• HP Color Laserjet 4650: all versions
• HP Officejet 4100: all versions
• HP Officejet 5100: all versions
• HP Officejet 5500: all versions
• HP Officejet 6100: all versions
• HP Officejet 7100: all versions
• HP Officejet D: all versions
• HP Officejet G: all versions
• HP Officejet K: all versions
• HP Pml Driver Hpz12: all versions
• HP Psc 1100: all versions
• HP Psc 1200: all versions
• HP Psc 1210 All-In-One: all versions
• HP Psc 1300: all versions
• HP Psc 2100: all versions
• HP Psc 2200: all versions
• HP Psc 2400 Photosmart All-In-One: all versions
• HP Psc 2500 Photosmart All-In-One: all versions
• HP Psc 2510 Photosmart: all versions
• HP Psc 700: all versions
• HP Psc 900: all versions

References

• http://osvdb.org/32654
• http://secunia.com/advisories/23663
• http://securityreason.com/securityalert/2128
• http://secway.org/advisory/AD20070108.txt
• http://www.securityfocus.com/archive/1/456259/100/0/threaded
• http://www.securityfocus.com/bid/21935
• http://www.vupen.com/english/advisories/2007/0094
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31361
• http://osvdb.org/32654
• http://secunia.com/advisories/23663
• http://securityreason.com/securityalert/2128
• http://secway.org/advisory/AD20070108.txt

Get alerted when CVE-2007-0161 or the next vulnerability affects your stack