PT-2014-4842

CVE-2014-2638

·

تاريخ النشر

2014-10-10

·

تاريخ التحديث

2019-10-09

الوصف من

CVSS 2.0
7.5
عالية
المقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions HP Sprinter version 12.01
Description The issue allows remote attackers to execute arbitrary code. It is related to a memory corruption vulnerability in the TTF16.ocx component, specifically with the DefaultFontName.
Recommendations For HP Sprinter version 12.01, consider disabling the TTF16.ocx component or restricting access to it until a patch is available. Avoid using the DefaultFontName variable in affected contexts to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ZDI-14-359
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾