CVE-2011-2331: Integer overflow in img.exe in HP Intelligent Management Center (IMC) allows remote attackers to execute ar...

Security readout for executives and security teams

CVE-2011-2331 is a remote code execution flaw reported in HP Intelligent Management Center's img.exe component. A remote attacker could send malformed network data that causes memory corruption and may allow arbitrary code execution. The source bundle does not identify affected versions, a CVSS score, or a confirmed vendor fix. Exposure is most likely in organizations still running HP Intelligent Management Center with the vulnerable img.exe component reachable over the network. The bundle does not provide affected version details, so inventory and vendor-advisory mapping are required before scoping impact. Prioritize verification if HP IMC remains in use. This affects a network management platform, so compromise could undermine operational visibility and administrative trust. Urgency depends on whether vulnerable legacy IMC systems are deployed and reachable. Mitigation focus: Identify all HP Intelligent Management Center deployments and their exact versions.; Check HP or HPE guidance for fixed versions or vendor-recommended mitigations.; Restrict network access to IMC services to trusted administration networks only..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.