HP Easy Printer Care Software 'HPTicketMgr.dll' ActiveX Control Remote Code Execution Vulnerability
Publish Date: 21 de июля de 2015
Severity: : High
CVE Kennungen: : CVE-2011-2404
Advisory Date: 21 de июля de 2015
DESCRIPTION
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787.
INFORMATION EXPOSURE
Apply associated Trend Micro DPI Rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1004777
Trend Micro Deep Security DPI Rule Name: 1004777 - HP Easy Printer Care Software 'HPTicketMgr.dll' ActiveX Control Remote Code Execution Vulnerability
AFFECTED SOFTWARE AND VERSION:
- hp easy_printer_care_software 2.5