CVE-2014-7894

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSPOSPrinter.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

CVE-2014-7889

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSLineDisplay.ocx for Retail RP7 VFD Customer Display monitors, Retail Integrated 2x20 Display monitors, Retail Integrated 2x20 Complex...

CVE-2014-7894

CVE-2014-7894 affects HP Point of Sale Windows PCs with OPOS CCO drivers older than 1.13.003. The vulnerability involves the OPOSPOSPrinter.ocx component (used by multiple printers such as PUSB/SERIAL USB, Hybrid MICR, Value printers, etc.) and allows remote code execution. The connected ZDI advi...

CVE-2014-7888

The CVE-2014-7888 family affects HP Point of Sale systems running Windows with OPOS Common Control Objects (CCO) drivers older than v1.13.003. The vulnerability resides in the OPOSMICR.ocx Open method, allowing remote code execution when exploited via these OPOS drivers (e.g., PUSB/Serial USB pri...

CVE-2014-7892

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMSR.ocx for Mini MSR magnetic stripe readers, Retail Integrated Dual-Head MSR magnetic stripe readers, Integrated Single Head MSR w/o SRED...

CVE-2014-7890

The CVE-2014-7890 issue affects HP Point of Sale systems using OPOS drivers (OPOS CCOs) prior to version 1.13.003. The root cause is in OPOSToneIndicator.ocx used by HP POS Keyboard and POS Keyboard with MSR, allowing remote code execution when an attacker can influence inputs to the Open method ...

CVE-2014-7893

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCheckScanner.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

CVE-2014-7890

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSToneIndicator.ocx for POS keyboards and POS keyboards with MSR, aka ZDI-CAN-2510...

CVE-2014-7895

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCashDrawer.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

CVE-2014-7892

The CVE-2014-7892 issue affects HP OPOS Common Control Objects (OPOS CCO) drivers prior to version 1.13.003 on Windows-based HP Point of Sale systems. The root cause is vulnerabilities in OPOSMSR.ocx (and related OPOS ActiveX controls) that enable remote code execution when exploited by remotely ...

CVE-2014-7891

The CVE-2014-7891 issue affects HP Point of Sale PCs running Windows with OPOS Drivers, specifically the OPOSPOSKeyboard.ocx component. The Open method input validation flaw leads to a buffer overflow that could enable remote code execution. Products impacted include OPOS CCO drivers (pre‑1.13.00...

CVE-2014-7893

CVE-2014-7893 is part of a set of remote code execution vulnerabilities affecting HP OLE Point of Sale (OPOS) Common Control Objects (CCO) drivers installed on Windows-based HP POS PCs. The issues exist in OPOS driver components prior to version 1.13.003, most notably OPOSCheckScanner.ocx, and ar...

CVE-2014-7897

HP OPOS CCO drivers released before 1.13.003 are affected by ARBITRARY CODE EXECUTION via OPOSScanner.ocx and related ActiveX controls across HP POS devices. The connected Nessus/HP advisories identify CVE-2014-7897 and related CVEs (e.g., 2014-7888..7898) as remote code execution vulnerabilities...

CVE-2014-7888

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMICR.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers,...

CVE-2015-0060

The font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not properly scale fonts, which allows loc...

CVE-2015-0057

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, a...

Remote code execution

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted TrueType font, aka "TrueType Font Parsing Remote Code Execution...

Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, a...

CVE-2015-0003

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service...

Privilege escalation

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service...