Lucene search

[email protected]CVE-2010-3920

HistoryDec 08, 2010 - 8:00 p.m.

CVE-2010-3920

2010-12-0820:00:01

CWE-264

[email protected]

web.nvd.nist.gov

epson

printer

driver

weak permissions

seiko

cve-2010-3920

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

The Seiko Epson printer driver installers for LP-S9000 before 4.1.11 and LP-S7100 before 4.1.7, or as downloaded from the vendor between May 2010 and 20101125, set weak permissions for the “C:\Program Files” folder, which might allow local users to bypass intended access restrictions and create or modify arbitrary files and directories.

Affected configurations

NVD

Node

epsonlp-s7100

AND

epsonlp-s7100_driver_4.1.0

epsonlp-s7100_driver_4.1.7

Node

epsonlp-s9000

AND

epsonlp-s9000_driver_4.1.0

epsonlp-s9000_driver_4.1.11

CPENameOperatorVersion
epson:lp-s7100_driver_4.1.0epson lp-s7100 driver 4.1.0eq*
epson:lp-s7100_driver_4.1.7epson lp-s7100 driver 4.1.7eq*

CPE	Name	Operator	Version
epson:lp-s7100_driver_4.1.0	epson lp-s7100 driver 4.1.0	eq	*
epson:lp-s7100_driver_4.1.7	epson lp-s7100 driver 4.1.7	eq	*

References

jvn.jp/en/jp/JVN62736872/index.html

jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000059.html

osvdb.org/69678

secunia.com/advisories/42540

www.epson.jp/support/misc/lps7100_9000/index.htm

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2010-3920

cvelist1 nvd1 jvn1 prion1