CVE-2014-7893

CVE-2014-7893 is part of a set of remote code execution vulnerabilities affecting HP OLE Point of Sale (OPOS) Common Control Objects (CCO) drivers installed on Windows-based HP POS PCs. The issues exist in OPOS driver components prior to version 1.13.003, most notably OPOSCheckScanner.ocx, and ar...

CVE-2014-7890

The CVE-2014-7890 issue affects HP Point of Sale systems using OPOS drivers (OPOS CCOs) prior to version 1.13.003. The root cause is in OPOSToneIndicator.ocx used by HP POS Keyboard and POS Keyboard with MSR, allowing remote code execution when an attacker can influence inputs to the Open method ...

CVE-2014-7897

HP OPOS CCO drivers released before 1.13.003 are affected by ARBITRARY CODE EXECUTION via OPOSScanner.ocx and related ActiveX controls across HP POS devices. The connected Nessus/HP advisories identify CVE-2014-7897 and related CVEs (e.g., 2014-7888..7898) as remote code execution vulnerabilities...

CVE-2014-7893

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCheckScanner.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

CVE-2014-7891

The CVE-2014-7891 issue affects HP Point of Sale PCs running Windows with OPOS Drivers, specifically the OPOSPOSKeyboard.ocx component. The Open method input validation flaw leads to a buffer overflow that could enable remote code execution. Products impacted include OPOS CCO drivers (pre‑1.13.00...

CVE-2014-7894

CVE-2014-7894 affects HP Point of Sale Windows PCs with OPOS CCO drivers older than 1.13.003. The vulnerability involves the OPOSPOSPrinter.ocx component (used by multiple printers such as PUSB/SERIAL USB, Hybrid MICR, Value printers, etc.) and allows remote code execution. The connected ZDI advi...

CVE-2014-7894

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSPOSPrinter.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

CVE-2014-7888

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMICR.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers,...

CVE-2014-7889

HP OPOS OPOSLineDisplay.ocx in HP Point of Sale Windows PCs (before v1.13.003) is vulnerable to remote code execution due to an unspecified flaw in the Open method of OPOSLineDisplay.ocx. The HP Security Bulletin and ZDI advisory tie CVE-2014-7889 to remote code execution via OPOSLineDisplay.ocx ...

CVE-2014-7898

HP OPOS CCO drivers for Windows (OPOS CCOs) before v1.13.003 are affected by remote code execution vulnerabilities in multiple ActiveX controls (e.g., OPOSCashDrawer.ocx, OPOSLineDisplay.ocx, OPOSPOSPrinter.ocx, OPOSMICR.ocx, OPOSScanner.ocx, OPOSMSR.ocx, OPOSToneIndicator.ocx, OPOSCheckScanner.o...

CVE-2014-7888: Undefined Security Weakness

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSMICR.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt printers,...

CVE-2014-7897: Undefined Security Weakness

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSScanner.ocx for Imaging Barcode scanners, Linear Barcode scanners, Presentation Barcode scanners, Retail Integrated Barcode scanners,...

PT-2015-3953

Name of the Vulnerable Software and Affected Versions HP Point of Sale OPOS drivers versions prior to 1.13.003 Description The issue allows remote attackers to execute arbitrary code via unspecified vectors. Recommendations For versions prior to 1.13.003, update to version 1.13.003 or later to...

PT-2015-3950

Name of the Vulnerable Software and Affected Versions HP Point of Sale Windows PCs OLE Point of Sale OPOS drivers versions prior to 1.13.003 Description The issue allows remote attackers to execute arbitrary code via vectors involving OPOSCashDrawer.ocx for various printer and cash drawer models...

PT-2015-3945

Name of the Vulnerable Software and Affected Versions HP Point of Sale Windows PCs OLE Point of Sale OPOS drivers versions prior to 1.13.003 Description The issue allows remote attackers to execute arbitrary code via vectors involving OPOSToneIndicator.ocx for POS keyboards and POS keyboards with...

PT-2015-3943

Name of the Vulnerable Software and Affected Versions HP Point of Sale Windows PCs OLE Point of Sale OPOS drivers versions prior to 1.13.003 Description The issue allows remote attackers to execute arbitrary code via vectors involving OPOSMICR.ocx for various HP Point of Sale printers. This affec...

CVE-2014-7895: Undefined Security Weakness

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSCashDrawer.ocx for PUSB Thermal Receipt printers, SerialUSB Thermal Receipt printers, Hybrid POS printers with MICR, Value PUSB Receipt...

CVE-2014-7898: Undefined Security Weakness

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via unspecified vectors...

PT-2015-3949

Name of the Vulnerable Software and Affected Versions HP Point of Sale Windows PCs OLE Point of Sale OPOS drivers versions prior to 1.13.003 Description The issue allows remote attackers to execute arbitrary code via vectors involving OPOSPOSPrinter.ocx for various printer models, including PUSB...

CVE-2014-7891: Undefined Security Weakness

The OLE Point of Sale OPOS drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vectors involving OPOSPOSKeyboard.ocx for POS keyboards and POS keyboards with MSR, aka ZDI-CAN-2509...