{"id":"CVE-2010-1961","aliases":["EUVD-2010-1980","GHSA-gc7h-r8w4-m2m4"],"status":"published","title":"Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7...","description":"Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.67319,"percentile":0.99311,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2010-06-10T00:00:00Z","modified":"2026-06-16T23:19:40Z","exploits":[{"source":"exploitdb","id":"EDB-17044","title":"HP OpenView Network Node Manager (OV NNM) - 'ovwebsnmpsrv.exe ovutil' Remote Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2011-03-23","verified":true,"url":"https://www.exploit-db.com/exploits/17044"},{"source":"metasploit","id":"exploit/windows/http/hp_nnm_ovwebsnmpsrv_ovutil","title":"HP OpenView Network Node Manager ovwebsnmpsrv.exe ovutil Buffer Overflow","type":"exploit","platform":"Windows","date":"2010-06-16","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/http/hp_nnm_ovwebsnmpsrv_ovutil"}],"products":[{"vendor":"hp","product":"openview_network_node_manager"}],"references":[{"url":"http://www.securityfocus.com/bid/40638","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=127602909915281\u0026w=2","tags":["vendor-advisory","x_refsource_HP","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-106/","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/511731/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/40101","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/59250","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securitytracker.com/id?1024071","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-1961"},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-106"},{"url":"https://github.com/advisories/GHSA-gc7h-r8w4-m2m4"}],"sources":{"cve":[{"id":"CVE-2010-1961","description":"Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.","status":"published","published":"2010-06-10T00:00:00Z","modified":"2024-08-07T02:17:14.359Z","updated_at":"2026-11-02T14:33:29.227451Z"}],"euvd":[{"id":"EUVD-2010-1980","description":"Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.","status":"published","published":"2010-06-10T00:00:00Z","modified":"2024-08-07T02:17:14Z","updated_at":"2026-11-03T01:39:39.367115Z"}],"ghsa":[{"id":"GHSA-gc7h-r8w4-m2m4","title":"Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7...","description":"Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.","status":"published","published":"2022-05-14T02:44:56Z","modified":"2025-04-11T03:36:57Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:05.853744Z"}],"nvd":[{"id":"CVE-2010-1961","description":"Buffer overflow in ovutil.dll in ovwebsnmpsrv.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via unspecified variables to jovgraph.exe, which are not properly handled in a call to the sprintf function.","status":"published","published":"2010-06-10T00:30:07.613Z","modified":"2026-06-16T23:19:40.4Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:47.724369Z"}]}}