CVE-2007-4349 json
The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Re…
published 2008-10-23 18 y ago modified 2026-06-16 4 mo ago also EUVD-2007-4332
- cvss
- 4.3
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.1%
- EPSS 3.1% chance of exploitation in 30 days, percentile 87%
- public exploits
- 0
- none known
Summary
The Shared Trace Service (aka OVTrace) in HP Performance Agent C.04.70 (aka 4.70), HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 (aka Report 3.70) allows remote attackers to cause a denial of service via an unspecified series of RPC requests (aka Trace Event Messages) that triggers an out-of-bounds memory access, related to an erroneous object reference.
Patch / fix
Exploit prediction
3.08% chance of exploitation in the next 30 days, higher than 87% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P |
References
-
securityfocus.com
/bid/31860
vdb-entry, patch
-
marc.info
/?l=bugtraq&m=122876677518654&w=2
vendor-advisory
-
marc.info
/?l=bugtraq&m=122876827120961&w=2
vendor-advisory
-
secunia.com
/advisories/27054
third-party-advisory, vendor-advisory
-
secunia.com
/secunia_research/2007-83/
vendor-advisory
-
vupen.com
/english/advisories/2008/2888
vdb-entry, vendor-advisory
-
securityreason.com
/securityalert/4501
third-party-advisory
-
securitytracker.com
/id?1021092
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/46028
vdb-entry
-
securityfocus.com
/archive/1/497648/100/0/threaded
mailing-list
Sources
- CVE List CVE-2007-4349
- NVD CVE-2007-4349
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.