CVE-2007-0161: HP Color Laserjet 4650

Medium severity, CVSS 4.1. EPSS: 0.7% chance of exploitation in the next 30 days.

The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE_CHANGE_CONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to CVE-2006-0023.

Affected products

• HP Color Laserjet 4650: any version
• HP Officejet 4100: any version
• HP Officejet 5100: any version
• HP Officejet 5500: any version
• HP Officejet 6100: any version
• HP Officejet 7100: any version
• HP Officejet D: any version
• HP Officejet G: any version
• HP Officejet K: any version
• HP Pml Driver HPZ12: any version
• HP Psc 1100: any version
• HP Psc 1200: any version
• HP Psc 1210 All-In-One: any version
• HP Psc 1300: any version
• HP Psc 2100: any version
• HP Psc 2200: any version
• HP Psc 2400 Photosmart All-In-One: any version
• HP Psc 2500 Photosmart All-In-One: any version
• HP Psc 2510 Photosmart: any version
• HP Psc 700: any version
• HP Psc 900: any version

Published 2007-01-10. Last modified 2026-06-16.