PT-2014-4842

CVE-2014-2638

·

Published

2014-10-10

·

Updated

2019-10-09

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions HP Sprinter version 12.01
Description The issue allows remote attackers to execute arbitrary code. It is related to a memory corruption vulnerability in the TTF16.ocx component, specifically with the DefaultFontName.
Recommendations For HP Sprinter version 12.01, consider disabling the TTF16.ocx component or restricting access to it until a patch is available. Avoid using the DefaultFontName variable in affected contexts to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Related identifiers
ZDI-14-359
Found an issue in the description? Have something to add? Feel free to write us 👾