PT-2010-5170 · Seiko Epson · Lp-S9000+1

Publicado 2010-12-08 · Atualizado 2011-03-11 · CVE-2010-3920

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Seiko Epson printer driver installers for LP-S9000 versions prior to 4.1.11 Seiko Epson printer driver installers for LP-S7100 versions prior to 4.1.7

Description The issue allows local users to bypass intended access restrictions and create or modify arbitrary files and directories due to weak permissions set for the "C:Program Files" folder.

Recommendations For Seiko Epson printer driver installers for LP-S9000 versions prior to 4.1.11, update to version 4.1.11 or later. For Seiko Epson printer driver installers for LP-S7100 versions prior to 4.1.7, update to version 4.1.7 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-3920

Produtos afetados

Lp-S7100

Lp-S9000

Referências · 6

• http://epson.jp/support/misc/lps7100_9000/index.htm · Aviso do Fabricante
• http://jvn.jp/en/jp/JVN62736872/index.html · Nota
• http://secunia.com/advisories/42540 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-3920 · Nota de Segurança
• http://osvdb.org/69678 · Nota
• http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000059.html · Nota