CVE-2014-7892

The CVE-2014-7892 issue affects HP OPOS Common Control Objects (OPOS CCO) drivers prior to version 1.13.003 on Windows-based HP Point of Sale systems. The root cause is vulnerabilities in OPOSMSR.ocx (and related OPOS ActiveX controls) that enable remote code execution when exploited by remotely ...

CVE-2014-7893

CVE-2014-7893 is part of a set of remote code execution vulnerabilities affecting HP OLE Point of Sale (OPOS) Common Control Objects (CCO) drivers installed on Windows-based HP POS PCs. The issues exist in OPOS driver components prior to version 1.13.003, most notably OPOSCheckScanner.ocx, and ar...

CVE-2014-7888

The CVE-2014-7888 family affects HP Point of Sale systems running Windows with OPOS Common Control Objects (CCO) drivers older than v1.13.003. The vulnerability resides in the OPOSMICR.ocx Open method, allowing remote code execution when exploited via these OPOS drivers (e.g., PUSB/Serial USB pri...

CVE-2014-7889

HP OPOS OPOSLineDisplay.ocx in HP Point of Sale Windows PCs (before v1.13.003) is vulnerable to remote code execution due to an unspecified flaw in the Open method of OPOSLineDisplay.ocx. The HP Security Bulletin and ZDI advisory tie CVE-2014-7889 to remote code execution via OPOSLineDisplay.ocx ...

CVE-2014-7891

The CVE-2014-7891 issue affects HP Point of Sale PCs running Windows with OPOS Drivers, specifically the OPOSPOSKeyboard.ocx component. The Open method input validation flaw leads to a buffer overflow that could enable remote code execution. Products impacted include OPOS CCO drivers (pre‑1.13.00...

CVE-2014-7890

The CVE-2014-7890 issue affects HP Point of Sale systems using OPOS drivers (OPOS CCOs) prior to version 1.13.003. The root cause is in OPOSToneIndicator.ocx used by HP POS Keyboard and POS Keyboard with MSR, allowing remote code execution when an attacker can influence inputs to the Open method ...

CVE-2014-7894

CVE-2014-7894 affects HP Point of Sale Windows PCs with OPOS CCO drivers older than 1.13.003. The vulnerability involves the OPOSPOSPrinter.ocx component (used by multiple printers such as PUSB/SERIAL USB, Hybrid MICR, Value printers, etc.) and allows remote code execution. The connected ZDI advi...

CVE-2014-7898

HP OPOS CCO drivers for Windows (OPOS CCOs) before v1.13.003 are affected by remote code execution vulnerabilities in multiple ActiveX controls (e.g., OPOSCashDrawer.ocx, OPOSLineDisplay.ocx, OPOSPOSPrinter.ocx, OPOSMICR.ocx, OPOSScanner.ocx, OPOSMSR.ocx, OPOSToneIndicator.ocx, OPOSCheckScanner.o...

CVE-2014-7895

CVE-2014-7895 affects HP Point of Sale Windows PCs with OPOS Common Control Objects (OPOS CCO) drivers older than 1.13.003. The vulnerability is in OPOSCashDrawer.ocx and enables remote code execution via the OPOS driver family (notably on PUSB/SERIAL USB receipts, MICR/hybrid printers, and relat...

CVE-2014-7897

HP OPOS CCO drivers released before 1.13.003 are affected by ARBITRARY CODE EXECUTION via OPOSScanner.ocx and related ActiveX controls across HP POS devices. The connected Nessus/HP advisories identify CVE-2014-7897 and related CVEs (e.g., 2014-7888..7898) as remote code execution vulnerabilities...