Code injection

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2344...

CVE-2014-2635

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2343...

CVE-2014-2636

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2336...

CVE-2014-2637

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2342...

CVE-2014-2638

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2344...

CVE-2014-2635

Summary: The HP Sprinter vulnerability CVE-2014-2635 (and related CVEs) is a memory corruption/remote code execution issue found in the Tidestone Formula One ActiveX controls shipped with HP Sprinter. The concrete entry details a flaw in the SwapTables method (TTF16.ocx) that can be exploited to ...

CVE-2014-2636

HP Sprinter 12.01 is affected by CVE-2014-2636 (ZDI-2336) through a memory corruption flaw in the TTF16.ocx AttachToSS control that can allow remote code execution. Exploitation requires user interaction (e.g., visiting a malicious page/file). Impact is remote code execution with the context of t...

CVE-2014-2637

HP Sprinter 12.01 is affected by CVE-2014-2637 due to a CopyRange/CopyRangeEx memory corruption vulnerability in the Tidestone Formula One ActiveX controls (TTF16.ocx). The ZDI advisory states this allows remote code execution when a vulnerable installation visits a malicious page or opens a mali...

CVE-2014-2638

HP Sprinter 12.01 is affected by a remote code execution vulnerability in the Tidestone Formula One ActiveX controls (TTF16.ocx). The root cause is a memory corruption flaw caused by assigning an overly long value to the DefaultFontName property, allowing an attacker to execute arbitrary code in ...

CVE-2014-2637: Undefined Security Weakness

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2342...

CVE-2014-2636: Undefined Security Weakness

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2336...

PT-2014-4840

Name of the Vulnerable Software and Affected Versions HP Sprinter version 12.01 Description The issue allows remote attackers to execute arbitrary code. It is related to the Hewlett-Packard Sprinter TTF16.ocx AttachToSS Memory Corruption Remote Code Execution. Recommendations For HP Sprinter...

PT-2014-4841

Name of the Vulnerable Software and Affected Versions HP Sprinter version 12.01 Description The issue allows remote attackers to execute arbitrary code. It is related to a memory corruption remote code execution vulnerability in the TTF16.ocx component, specifically affecting the CopyRange and...

CVE-2014-2635: Undefined Security Weakness

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2343...

PT-2014-4842

Name of the Vulnerable Software and Affected Versions HP Sprinter version 12.01 Description The issue allows remote attackers to execute arbitrary code. It is related to a memory corruption vulnerability in the TTF16.ocx component, specifically with the DefaultFontName. Recommendations For HP...

CVE-2014-2638: Undefined Security Weakness

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2344...

PT-2014-4839

Name of the Vulnerable Software and Affected Versions HP Sprinter version 12.01 Description The issue allows remote attackers to execute arbitrary code. It is related to a memory corruption vulnerability in the SwapTables Method of the TTF16.ocx component. Recommendations For HP Sprinter version...