[SECURITY] Fedora 15 Update: foomatic-4.0.7-3.fc15

Foomatic is a comprehensive, spooler-independent database of printers, printer drivers, and driver descriptions. This package contains utilities to generate driver description files and printer queues for CUPS, LPD, LPRng, and PDQ using the database packaged separately. There is also the...

ZDI-11-261: HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability

ZDI-11-261: HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-261 August 16, 2011 -- CVE ID: CVE-2011-2404 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Hewlett-Packard -- Affected...

HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Easy Printer Care. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Execution

This module allows remote attackers to place arbitrary files on a users file system by abusing via Directory Traversal attack the "saveXML" method from the "XMLSimpleAccessor" class in the HP Easy Printer HPTicketMgr.dll ActiveX Control HPTicketMgr.dll 2.7.2.0. Code execution can be achieved by...

HP Easy Printer Care Software ActiveX Control Remote Code Execution Vulnerabilities

The version of the HPTicketMgr.dll ActiveX control, part of HP Easy Printer Care Software and installed on the remote Windows host, is affected by several vulnerabilities : - The 'SaveXML' method in the XMLSimpleAccessor class ActiveX control is prone to a directory traversal attack and can be...

[security bulletin] HPSBPI02698 SSRT100404 rev.1 - HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02949847 Version: 1 HPSBPI02698 SSRT100404 rev.1 - HP Easy Printer Care Software Running on Windows, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be...

CVE-2011-2404

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787...

Design/Logic Flaw

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787...

DSquare Exploit Pack: D2SEC_HPEASY

Name| d2sechpeasy ---|--- CVE| CVE-2011-2404 Exploit Pack| D2ExploitPack Description| HP Easy Printer Care ActiveX Control Remote Code Execution Vulnerability Notes|...

CVE-2011-2404

CVE-2011-2404 affects HP Easy Printer Care Software 2.5 and earlier, via an ActiveX control in HPTicketMgr.dll. It allows remote attackers to download an arbitrary program to a client machine and execute it, via unspecified vectors; this is a separate vulnerability from CVE-2011-4786 and CVE-2011...

CVE-2011-2404

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787...

PT-2011-3832

Name of the Vulnerable Software and Affected Versions HP Easy Printer Care affected versions not specified Description The issue concerns a remote code execution vulnerability in the XMLSimpleAccessor Class ActiveX Control of HP Easy Printer Care. Recommendations At the moment, there is no...

CVE-2011-2404: Improper Control of Generation of Code

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787...

HP JetDirect PJL - Query Execution (Metasploit)

HP JetDirect PJL - Query Execution Metasploit Exploit Title: HP JetDirect PJL Query Execution Date: Aug 7, 2011 Author: Myo Soe Software Link: http://www.hp.com Version: All Tested on: HP LaserJet Pxxxx Series $Id: $ This file is part of the Metasploit Framework and may be subject to redistributi...

HP JetDirect PJL Interface Universal Path Traversal

Exploit Title: HP JetDirect PJL Interface Universal Path Traversal Date: Aug 7, 2011 Author: Myo Soe Software Link: http://www.hp.com Version: All Tested on: HP LaserJet Pxxxx Series $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial...

HP JetDirect Printer PJL Query Execution

Exploit Title: HP JetDirect PJL Query Execution Date: Aug 7, 2011 Author: Myo Soe Software Link: http://www.hp.com Version: All Tested on: HP LaserJet Pxxxx Series $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...

HP JetDirect PJL Query Execution

Exploit for hardware platform in category remote exploits Exploit Title: HP JetDirect PJL Query Execution Date: Aug 7, 2011 Author: Myo Soe Software Link: http://www.hp.com Version: All Tested on: HP LaserJet Pxxxx Series $Id: $ This file is part of the Metasploit Framework and may be subject to...

HP JetDirect PJL Interface Universal Path Traversal

Exploit for hardware platform in category remote exploits Exploit Title: HP JetDirect PJL Interface Universal Path Traversal Date: Aug 7, 2011 Author: Myo Soe Software Link: http://www.hp.com Version: All Tested on: HP LaserJet Pxxxx Series $Id: $ This file is part of the Metasploit Framework and...

HP JetDirect PJL - Interface Universal Directory Traversal (Metasploit)

HP JetDirect PJL - Interface Universal Directory Traversal Metasploit Exploit Title: HP JetDirect PJL Interface Universal Path Traversal Date: Aug 7, 2011 Author: Myo Soe Software Link: http://www.hp.com Version: All Tested on: HP LaserJet Pxxxx Series $Id: $ This file is part of the Metasploit...

HP JetDirect PJL - Query Execution (Metasploit)

Exploit Title: HP JetDirect PJL Query Execution Date: Aug 7, 2011 Author: Myo Soe Software Link: http://www.hp.com Version: All Tested on: HP LaserJet Pxxxx Series $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...