Vulnerability Details CVE-2011-2404
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.805
EPSS Ranking 99.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=131291471508119&w=2
- http://marc.info/?l=bugtraq&m=131291471508119&w=2
- http://securityreason.com/securityalert/8332
- http://securityreason.com/securityalert/8348
- http://marc.info/?l=bugtraq&m=131291471508119&w=2
- http://marc.info/?l=bugtraq&m=131291471508119&w=2
- http://securityreason.com/securityalert/8332
- http://securityreason.com/securityalert/8348
Products affected by CVE-2011-2404
-
cpe:2.3:a:hp:easy_printer_care_software:*