PT-2014-4841 · Hewlett Packard · Ttf16.Ocx+1

Published 2014-10-10 · Updated 2019-10-09 · CVE-2014-2637

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions HP Sprinter version 12.01

Description The issue allows remote attackers to execute arbitrary code. It is related to a memory corruption remote code execution vulnerability in the TTF16.ocx component, specifically affecting the CopyRange and CopyRangeEx functions.

Recommendations For HP Sprinter version 12.01, consider disabling the TTF16.ocx component or restricting its use to minimize the risk of exploitation until a patch is available.

Fix

Related Identifiers

CVE-2014-2637

ZDI-14-360

Affected Products

Hp Sprinter

Ttf16.Ocx

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-2637 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-360 · Security Note
• https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04454636 · Vendor Advisory