Denial of Service Vulnerability in HP Data Protector Express

CVE-2009-0714

Summary

An unspecified vulnerability exists in the dpwinsup module (dpwinsup.dll) of HP Data Protector Express and Express SSE. This vulnerability allows remote attackers to induce denial of service conditions, potentially causing application crashes or enabling access to sensitive memory contents through the delivery of specially crafted packets. Affected versions include Data Protector Express 3.x prior to build 47065 and Data Protector Express SSE 3.x prior to the same threshold, along with versions 4.x before build 46537.

References