CVE-2011-4791: HP Data Protector Media Operations

High severity, CVSS 10.0. EPSS: 8.2% chance of exploitation in the next 30 days.

DBServer.exe in HP Data Protector Media Operations 6.11 and earlier allows remote attackers to execute arbitrary code via a crafted request containing a large value in a length field.

Affected products

• HP Data Protector Media Operations: up to and including 6.11; version 5.0 only; version 5.1 only; version 5.5 only; version 6.10 only

Published 2012-02-03. Last modified 2026-06-16.