HP Point of Sale OPOS Driver opostoneindicator.ocx Open Method Stack Buffer Overflow (CVE-2014-7890)

A buffer overflow vulnerability exists in the opostoneindicator.ocx component of HP Point of Sale PC running with OPOS Driver. The vulnerability is due to insufficient input validation on user supplied parameter value to the Open method. A remote, unauthenticated attacker can exploit this...

CVE-2014-7890

The CVE-2014-7890 issue affects HP Point of Sale systems using OPOS drivers (OPOS CCOs) prior to version 1.13.003. The root cause is in OPOSToneIndicator.ocx used by HP POS Keyboard and POS Keyboard with MSR, allowing remote code execution when an attacker can influence inputs to the Open method ...