VulnerabilityModified
CVE-2010-1551
Stack-based buffer overflow in the _OVParseLLA function in ov.dll in netmon.exe in Network Monitor in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via the sel parameter.
HIGH 10.0EPSS 13.1%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 13.1%, higher than 96% of all known CVEs. Patch or mitigate before the next change window.
Description
Stack-based buffer overflow in the _OVParseLLA function in ov.dll in netmon.exe in Network Monitor in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via the sel parameter.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 13.08% probability · 96th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- hp/openview network node manager
- Source
- hp-security-alert@hp.com
References
- http://marc.info/?l=bugtraq&m=127360750704351&w=2
- http://www.securityfocus.com/archive/1/511247/100/0/threaded
- http://www.securityfocus.com/bid/40067
- http://zerodayinitiative.com/advisories/ZDI-10-082/
- http://marc.info/?l=bugtraq&m=127360750704351&w=2
- http://www.securityfocus.com/archive/1/511247/100/0/threaded
- http://www.securityfocus.com/bid/40067
- http://zerodayinitiative.com/advisories/ZDI-10-082/
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.