CVE-2007-3872

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 30.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-09 · updated 2026-06-16

Description

Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.

Affected products

HP Openview Operations: through a.07.50
HP Shared Trace Service: through a.07.50

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01106515
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109171
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109584
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01109617
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01110576
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01110627
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01111851
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01112038
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01114023
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01114156
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01115068
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=574

Get alerted when CVE-2007-3872 or the next vulnerability affects your stack