CVE-2024-34329

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload...

CVE-2024-34329

Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated attackers to execute arbitrary code as SYSTEM via a crafted DLL payload...

CVE-2024-34329

The Entrust Datacard XPS Card Printer Driver (versions 8.5 and earlier, or 8.4 and earlier) is vulnerable to Local Privilege Escalation (LPE) due to insecure file/folder permissions . Specifically, the directory C:\ProgramData\Datacard\XPS Card Printer\Service grants full control to everyone, all...