HP has multiple remote code execution vulnerabilities

HP Easy Deploy is an automated deployment tool. A remote code execution vulnerability exists in HP Easy Deploy distributed by HP Easy Tools on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620,t820 devices, which allows remote attackers to exploit...

CVE-2015-2113

Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote attackers to execute arbitrary code via unknown...

CVE-2015-2112

Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute arbitrary code via...

Code injection

Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute arbitrary code via...

Code injection

Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote attackers to execute arbitrary code via unknown...

CVE-2015-2112

HP Easy Deploy on HP Thin Clients (Windows Embedded Standard 7/2009) prior to version 3.0.1.1650, bundled with HP Easy Tools, is affected. The CVE-2015-2112 entry corresponds to remote elevation of privilege and execution of code by remote, authenticated users via unknown vectors on devices: t554...

CVE-2015-2113

Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote attackers to execute arbitrary code via unknown...

Indusoft Thin Client 7.1 ActiveX - Buffer Overflow

No description provided by source. html !-- InduSoft Thin Client v7.1 Date: October 8, 2013 Exploit Author: Blake Software Link: http://www.indusoft.com/Products-Downloads/Download-Library Version: 7.1 Tested on: Windows XP SP3 / IE6 Affected File:i386\novapi7.dll Member Name: Initialize2 Program...

InduSoft Web Studio Thin Client Detection

Binary data 8033.prm...

[security bulletin] HPSBHF03021 rev.1 - HP Thin Client with ThinPro OS or Smart Zero Core Services, Running OpenSSL, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04262670 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04262670 Version: 1 HPSBHF03021 rev....

HPSBHF03021 rev.1 - HP Thin Client with ThinPro OS or Smart Zero Core Services, Running OpenSSL, Remote Disclosure of Information

Potential Security Impact Remote disclosure of information VULNERABILITY SUMMARY The “Heartbleed” vulnerability was detected in specific OpenSSL versions. OpenSSL is a 3rd party product that is embedded with some of HP products. This bulletin’s objective is to notify HP customers about certain HP...

InduSoft ISSymbol ActiveX Control Buffer Overflow (Update A)

Overview Security researcher Dmitriy Pletnevo of Secunia ResearchSecunia Research, http://secunia.com/secuniaresearch/2011-36/, website last accessed June 16, 2011. has released details of multiple overflow vulnerabilities affecting the InduSoft ISSymbol ActiveX control. The researcher identified...

Indusoft Thin Client 7.1 - ActiveX Buffer Overflow

Indusoft Thin Client 7.1 - ActiveX Buffer Overflow // heap spray for IE6 // calc - 196 bytes var shellcode =...

Indusoft Thin Client 7.1 Buffer Overflow

// heap spray for IE6 // calc - 196 bytes var shellcode =...

Indusoft Thin Client 7.1 ActiveX - Buffer Overflow Vulnerability

Exploit for windows platform in category remote exploits // heap spray for IE6 // calc - 196 bytes var shellcode =...

Indusoft Thin Client 7.1 - ActiveX Buffer Overflow

// heap spray for IE6 // calc - 196 bytes var shellcode =...

CVE-2013-2339

HP Smart Zero Core 4.3 and 4.3.1 on the t410 All-in-One Smart Zero Client, t410 Smart Zero Client, t510 Flexible Thin Client, t5565z Smart Client, t610 Flexible Thin Client, and t610 PLUS Flexible Thin Client allows local users to obtain sensitive information, modify data, or cause a denial of...

Code injection

HP Smart Zero Core 4.3 and 4.3.1 on the t410 All-in-One Smart Zero Client, t410 Smart Zero Client, t510 Flexible Thin Client, t5565z Smart Client, t610 Flexible Thin Client, and t610 PLUS Flexible Thin Client allows local users to obtain sensitive information, modify data, or cause a denial of...

CVE-2013-2339

The CVE-2013-2339 entry concerns HP Smart Zero Core OS 4.3 and 4.3.1 running on HP Smart Zero Client devices (t410/t510/t610 etc.). The issue is described as allowing a local user to obtain sensitive information, modify data, or cause a denial of service via unknown vectors. HP’s security bulleti...

HPSBHF02878 rev.1 - HP Smart Zero Client, Unauthorized Access

Potential Security Impact Unauthorized access VULNERABILITY SUMMARY A potential security vulnerability has been identified with the HP Smart Zero Client. This vulnerability could be exploited by a local user on the device to gain unauthorized access. RESOLUTION HP has provided updated operating...