{"id":"CVE-2009-0714","aliases":["EUVD-2009-0714","GHSA-63w6-9m53-953q"],"status":"published","title":"Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP...","description":"Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.51612,"percentile":0.98952,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2009-05-14T17:00:00Z","modified":"2026-06-16T23:05:37Z","exploits":[{"source":"exploitdb","id":"EDB-9006","title":"HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service","type":"dos","platform":"windows","date":"2009-06-23","verified":true,"url":"https://www.exploit-db.com/exploits/9006"},{"source":"exploitdb","id":"EDB-9007","title":"HP Data Protector 4.00-SP1b43064 - Remote Memory Leak/Denial of Service (Metasploit)","type":"dos","platform":"windows","date":"2009-06-23","verified":true,"url":"https://www.exploit-db.com/exploits/9007"}],"products":[{"vendor":"hp","product":"data_protector_express"}],"references":[{"url":"http://www.securitytracker.com/id?1022220","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01697543","tags":["vendor-advisory","x_refsource_HP","x_transferred","Vendor Advisory"]},{"url":"https://www.exploit-db.com/exploits/9007","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://ivizsecurity.com/security-advisory-iviz-sr-09002.html","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"http://secunia.com/advisories/35084","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/bid/34955","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.vupen.com/english/advisories/2009/1309","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"https://www.exploit-db.com/exploits/9006","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0714"},{"url":"https://github.com/advisories/GHSA-63w6-9m53-953q"}],"sources":{"cve":[{"id":"CVE-2009-0714","description":"Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.","status":"published","published":"2009-05-14T17:00:00Z","modified":"2024-08-07T04:48:51.687Z","updated_at":"2026-11-02T14:33:25.896677Z"}],"euvd":[{"id":"EUVD-2009-0714","description":"Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.","status":"published","published":"2009-05-14T17:00:00Z","modified":"2024-08-07T04:48:51Z","updated_at":"2026-11-03T01:39:24.749817Z"}],"ghsa":[{"id":"GHSA-63w6-9m53-953q","title":"Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP...","description":"Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.","status":"published","published":"2022-05-02T03:17:48Z","modified":"2023-01-31T05:06:52Z","updated_at":"2026-11-02T14:49:06.846539Z"}],"nvd":[{"id":"CVE-2009-0714","description":"Unspecified vulnerability in the dpwinsup module (dpwinsup.dll) for dpwingad (dpwingad.exe) in HP Data Protector Express and Express SSE 3.x before build 47065, and Express and Express SSE 4.x before build 46537, allows remote attackers to cause a denial of service (application crash) or read portions of memory via one or more crafted packets.","status":"published","published":"2009-05-14T17:30:00.547Z","modified":"2026-06-16T23:05:37.467Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:35.136779Z"}]}}