CVE-2012-3796
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000...
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode.
Exploit likelihood
What each source reports
NVD Score used
5.0
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode.
- Record
CVE-2012-3796- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode.
- Record
CVE-2012-3796- Updated
- 2026-11-02
EUVDEUVD-2012-3743 No score
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode.
- Record
EUVD-2012-3743- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wf2q-h65h-r5p4 No score
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000...
Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode.
- Record
GHSA-wf2q-h65h-r5p4- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities | 2012-05-14 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-3796 is a medium vulnerability (CVSS 5.0) in Pro-face Pro-server Ex, published June 25, 2012. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.5%, the 95th percentile. No source names a fixed version.
References
hmisource.com/otasuke/news/2012/0606.html
hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt
aluigi.org/adv/proservrex_1-adv.txt
ics-cert.us-cert.gov/advisories/ICSA-12-179-01
securityfocus.com/bid/53499
secunia.com/advisories/49172
nvd.nist.gov/vuln/detail/CVE-2012-3796
github.com/advisories/GHSA-wf2q-h65h-r5p4