PT-2014-4841 · Hewlett Packard · Ttf16.Ocx+1

Publicado 2014-10-10 · Atualizado 2019-10-09 · CVE-2014-2637

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Sprinter version 12.01

Description The issue allows remote attackers to execute arbitrary code. It is related to a memory corruption remote code execution vulnerability in the TTF16.ocx component, specifically affecting the CopyRange and CopyRangeEx functions.

Recommendations For HP Sprinter version 12.01, consider disabling the TTF16.ocx component or restricting its use to minimize the risk of exploitation until a patch is available.

Correção

Identificadores relacionados

CVE-2014-2637

ZDI-14-360

Produtos afetados

Hp Sprinter

Ttf16.Ocx

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2637 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-360 · Nota de Segurança
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636 · Aviso do Fabricante