← Vulnerability feed

Vulnerability record · CVE-2012-3797 · published 25 June 2012

CVE-2012-3797: Pro-face pro-server ex memory buffer overflow vulnerability

Pro Face · Pro Server Ex

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reusing packet memory buffers, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a short crafted packet with a certain opcode.

10.0 CVSS 2.0 High EPSS 12% · top 4.0% CWE-119 · Memory buffer overflow
10.0CVSS 2.0 base score
12%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reusing packet memory buffers, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a short crafted packet with a certain opcode.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://aluigi.org/adv/proservrex_1-adv.txt
http://ics-cert.us-cert.gov/advisories/ICSA-12-179-01
http://secunia.com/advisories/49172
http://www.securityfocus.com/bid/53499
https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt
https://www.hmisource.com/otasuke/news/2012/0606.html Vendor Advisory
http://aluigi.org/adv/proservrex_1-adv.txt
http://ics-cert.us-cert.gov/advisories/ICSA-12-179-01
http://secunia.com/advisories/49172
http://www.securityfocus.com/bid/53499
https://www.hmisource.com/otasuke/download/update/server_ex/server_ex/Readme_E.txt
https://www.hmisource.com/otasuke/news/2012/0606.html Vendor Advisory

Track CVE-2012-3797 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.0CVE-2012-3792Pro-face pro-server ex memory buffer overflow vulnerabilityPro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a den…EPSS 11%5.0CVE-2012-3793Pro-face pro-server ex memory buffer overflow vulnerabilityInteger overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote atta…EPSS 12%5.0CVE-2012-3794Pro-face pro-server ex memory buffer overflow vulnerabilityPro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a den…EPSS 21%5.0CVE-2012-3795Pro-face pro-server ex memory buffer overflow vulnerabilityPro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a den…EPSS 11%5.0CVE-2012-3796Pro-face pro-server ex information exposure vulnerabilityPro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sens…EPSS 11%8.8CVE-2026-8452Citrix NetScaler ADC and Gateway memory buffer overflow causes DoSCVE-2026-8452 is a memory buffer overflow (CWE-119) in Citrix NetScaler ADC and NetScaler Gateway that leads to unpredictable or erroneous behavior a…KEVEPSS 1.0%analysed8.8CVE-2009-3459Adobe Reader and Acrobat heap buffer overflow via crafted PDFAdobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 contain a heap-based buffer overflow (CWE-122) triggered by a crafted…KEVEPSS 87%analysed9.8CVE-2008-4250Microsoft Windows Server service RPC path canonicalization buffer overflowThe Server service in multiple Windows versions fails to properly handle path canonicalization, allowing a crafted RPC request to overflow a buffer a…KEVEPSS 99%analysed

Source: NIST National Vulnerability Database (record CVE-2012-3797), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.