Epson USB Display 1.6.0.0 - 'EMP_UDSA' Unquoted Service Path

Exploit Title: Epson USB Display 1.6.0.0 - 'EMPUDSA' Unquoted Service Path Discovery by: Hector Gerbacio Discovery Date: 2021-02-05 Vendor Homepage: https://epson.com.mx/ Tested Version: 1.6.0.0 Vulnerability Type: Unquoted Service Path Tested on OS: Windows 8.1 con Bing Step to discover Unquoted...

CVE-2020-9453

In Epson iProjection v2.30, the driver file EMPMPAU.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. 0x9C402402 has only a NULL pointer dereference. This affects...

CVE-2020-9453

In Epson iProjection v2.30, the driver file EMPMPAU.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. 0x9C402402 has only a NULL pointer dereference. This affects...

CVE-2020-9453

In Epson iProjection v2.30, the driver file EMPMPAU.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. 0x9C402402 has only a NULL pointer dereference. This affects...

Null pointer dereference

In Epson iProjection v2.30, the driver file EMPMPAU.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. 0x9C402402 has only a NULL pointer dereference. This affects...

CVE-2020-9014

In Epson iProjection v2.30, the driver file EMPNSAU.sys allows local users to cause a denial of service BSOD via crafted input to the virtual audio device driver with IOCTL 0x9C402402, 0x9C402406, or 0x9C40240A. \Device\EMPNSAUIO and \DosDevices\EMPNSAU are similarly affected...

CVE-2020-9014

In Epson iProjection v2.30, the driver file EMPNSAU.sys allows local users to cause a denial of service BSOD via crafted input to the virtual audio device driver with IOCTL 0x9C402402, 0x9C402406, or 0x9C40240A. \Device\EMPNSAUIO and \DosDevices\EMPNSAU are similarly affected...

Input validation

In Epson iProjection v2.30, the driver file EMPNSAU.sys allows local users to cause a denial of service BSOD via crafted input to the virtual audio device driver with IOCTL 0x9C402402, 0x9C402406, or 0x9C40240A. \Device\EMPNSAUIO and \DosDevices\EMPNSAU are similarly affected...

CVE-2020-9453

The CVE-2020-9453 issue affects Epson iProjection v2.30 via the driver EMP_MPAU.sys, where input validation fails for IOCTL codes 0x9C402406 and 0x9C40240A. This can allow local users to trigger a denial of service (BSOD) and potentially other impact on devices \Device\EMPMPAUIO and \DosDevices\E...

CVE-2020-9453

In Epson iProjection v2.30, the driver file EMPMPAU.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. 0x9C402402 has only a NULL pointer dereference. This affects...

CVE-2020-9014

In Epson iProjection v2.30, the driver file EMPNSAU.sys allows local users to cause a denial of service BSOD via crafted input to the virtual audio device driver with IOCTL 0x9C402402, 0x9C402406, or 0x9C40240A. \Device\EMPNSAUIO and \DosDevices\EMPNSAU are similarly affected...

CVE-2020-9014

CVE-2020-9014 affects Epson iProjection v2.30 via the driver file EMP_NSAU.sys, which allows local users to trigger a denial of service (BSOD) by crafting input to the virtual audio device driver using IOCTL 0x9C402402, 0x9C402406, or 0x9C40240A. Affected devices are \Device\EMPNSAUIO and \DosDev...

OESA-2021-1033 sane-backends security update

SANE Scanner Access Now Easy is a sane and simple interface to both local and networked scanners and other image acquisition devices like digital still and video cameras.\r\n\r\n Security Fixes:\r\n\r\n A NULL pointer dereference in saneiepsonnetread in SANE Backends before 1.0.30 allows a...

Epson Iprojection Input Validation Error Vulnerability

Epson Iprojection is an application from Epson Japan that provides wireless projection capabilities for mobile devices. A security vulnerability exists in Epson iProjection v2.30 that originates from allowing a local user to cause a denial of service BSOD by using IOCTL 0x9C402402, 0x9C402406, or...

PT-2021-12821 · Epson · Epson Iprojection

Name of the Vulnerable Software and Affected Versions: Epson iProjection version 2.30 Description: The driver file EMP NSAU.sys in Epson iProjection allows local users to cause a denial of service BSOD via crafted input to the virtual audio device driver with IOCTL 0x9C402402, 0x9C402406, or...

Epson Iprojection 代码问题漏洞

Epson Iprojection is an application from Epson Japan that provides wireless projection capabilities for mobile devices. An input validation error vulnerability exists in Epson iProjection v2.30 that allows a local user to cause a denial of service due to failure to validate input values from IOCt...

PT-2021-12854 · Epson · Epson Iprojection

Name of the Vulnerable Software and Affected Versions: Epson iProjection version 2.30 Description: The driver file EMP MPAU.sys in Epson iProjection allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl...

Self-Extracting files created by multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries

Overview Self-Extracting files created by multiple SEIKO EPSON products contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. SEIKO EPSON CORPORATION reported this vulnerability to JPCERT/CC to notify users of its solution through JVN...

Epson Setupmanager Code Issue Vulnerability

Epson Setupmanager is a printer driver software from Epson Japan for Windows operating systems. A code issue vulnerability exists in the self-extracting file in version 2.2.1 of Epson Setupmanager, which could lead to unsafe loading of dynamic link libraries...

JVN#94244575: Self-Extracting files created by multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries

Self-Extracting files created by multiple SEIKO EPSON products contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the Self-Extracting files. Solution Update t...