CVE-2011-2404

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787.

Score

CVSS 2.0 7.5 High

Status

Modified - hp-security-alert@hp.com

Published

2011-08-11

Last modified

2024-08-06

Weaknesses

CWE-94

Affected products

• Easy Printer Care Software (Hp)

References

• http://marc.info/?l=bugtraq&m=131291471508119&w=2
• http://securityreason.com/securityalert/8332
• http://securityreason.com/securityalert/8348