HPSBPI03566 Rev 3 - HP DesignJet, OfficeJet, LaserJet, PageWide, Photosmart Printers, Execution of Arbitrary Code or Denial of Service

Potential Security Impact

Execution of arbitrary code or Denial of Service

Source: HP Product Security Response Team (PSRT)

Reported by: Check Point Software

VULNERABILITY SUMMARY

Integer overflow in SOAP (Simple Object Access Protocol) function in Genivia gSOAP allows execution of arbitrary code or denial of service, aka Devil’s Ivy attack.

RESOLUTION

HP has provided firmware updates for impacted printers as indicated in the table below. Follow these steps to obtain the updated firmware:

1. Go to www.hp.com

2. Select Support at the top of the page, then click Software & drivers.

3. Enter the appropriate product name or model number from the table below into the search field.

4. Click Find.

5. Scroll down and click Firmware from the category list.

6. Click the Download button for appropriate firmware.