SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Device (Printer)  >   HP Printer Vendors:   HPE
HP Inkjet Printers Buffer Overflows in Processing Files Let Remote Users Execute Arbitrary Code
SecurityTracker Alert ID:  1041415
SecurityTracker URL:  http://securitytracker.com/id/1041415
CVE Reference:   CVE-2018-5924, CVE-2018-5925   (Links to External Site)
Date:  Aug 3 2018
Impact:   Execution of arbitrary code via network, User access via network
Fix Available:  Yes  Vendor Confirmed:  Yes  

Description:   Two vulnerabilities were reported in HP Inkjet Printers. A remote user can execute arbitrary code on the target system.

A remote user can create a specially crafted file that, when sent to target device, will trigger a buffer overflow and execute arbitrary code on the target device.

The vendor has assigned PSR-2018-0072 to these vulnerabilities.

The following Pagewide Pro, HP DesignJet, HP Officejet, HP Deskjet, and HP Envy models are affected:

HP PageWide Managed MFP P77740dn
HP PageWide Managed MFP P77740dw
HP PageWide Managed MFP P77740z
HP PageWide Managed MFP P77750z
HP PageWide Managed MFP P77760z
HP PageWide Managed P75050dn
HP PageWide Managed P75050dw
HP PageWide Pro 750dn
HP PageWide Pro 750dw
HP PageWide Pro MFP 772dn
HP PageWide Pro MFP 772dw
HP DesignJet rugged case
HP Designjet T120 24-in ePrinter
HP Designjet T120 24-in Printer
HP Designjet T120 24-in Printer (2018 edition)
HP Designjet T120 24-in Rmkt ePrinter
HP Designjet T520 24-in ePrinter
HP Designjet T520 24-in Printer
HP Designjet T520 24-in Printer (2018 edition)
HP Designjet T520 24-in Printer (2018 edition)
HP Designjet T520 24-in Printer (2018 edition, legless)
HP Designjet T520 24-in Rmkt ePrinter
HP Designjet T520 36-in ePrinter
HP Designjet T520 36-in Printer
HP Designjet T520 36-in Printer (2018 edition)
HP Designjet T520 36-in Printer (2018 edition, legless)
HP Designjet T520 36-in Rmkt ePrinter
HP DesignJet T730 36in Printer
HP DesignJet T730 36in Printer
HP Designjet T730 with Rugged Case
HP DesignJet T830 24in eMFP Printer
HP DesignJet T830 24-in MFP Printer
HP DesignJet T830 MFP with Armor Case
HP DesignJet T830 MFP with Armour Case
HP DesignJet T830 MFP with Rugged Case
HP AMP 1xx Printerseries
HP AMP 1xx Printerseries
HP AMP 1xx Printerseries
HP Deskjet 2540 All-in-One
HP Deskjet 2540 All-in-One
HP DeskJet 2600 All-in-One Printer
HP DeskJet 2600 All-in-One Printer
HP DeskJet 2600 All-in-One Printer
HP DeskJet 2600 All-in-One Printer
HP DeskJet 2600 All-in-One Printer
HP DeskJet 2600 All-in-One Printer
HP Deskjet 2620 Ink Advantage series
HP Deskjet 3540 series
HP Deskjet 3540 series
HP Deskjet 3540 series
HP DeskJet 3630 series
HP DeskJet 3630 series
HP DeskJet 3630 series
HP DeskJet 3700 All-in-One Printerseries
HP DeskJet 3700 All-in-One Printerseries
HP DeskJet 3700 All-in-One Printerseries
HP Deskjet 4510 series
HP DeskJet 4530 series
HP DeskJet 4530 series
HP DeskJet 4530 series
HP DeskJet 4720 series
HP DeskJet 4720 series
HP DeskJet 5000 series
HP DeskJet 5275 All-in-One Printer
HP DeskJet 5640 series
HP DeskJet 5730 series
HP DeskJet 5730 series
HP Deskjet Ink Advantage 2540 All-in-One
HP DeskJet Ink Advantage 2600 All-in-One Printer
HP DeskJet Ink Advantage 2600 All-in-One Printer
HP DeskJet Ink Advantage 3630 All-in-One Printer
HP DeskJet Ink Advantage 3630 All-in-One Printer
HP DeskJet Ink Advantage 3700 All-in-One Printerseries
HP DeskJet Ink Advantage 3700 All-in-One Printerseries
HP DeskJet Ink Advantage 3700 All-in-One Printerseries
HP DeskJet Ink Advantage 3700 All-in-One Printerseries
HP DeskJet Ink Advantage 3700 All-in-One Printerseries
HP Deskjet Ink Advantage 3830 e-All-in-One Printer
HP Deskjet Ink Advantage 3830 e-All-in-One Printer
HP Deskjet Ink Advantage 4615 All-in-One Printer
HP Deskjet Ink Advantage 4625 e-All-in-One
HP Deskjet Ink Advantage 4640 e-All-in-One Printerseries
HP DeskJet Ink Advantage 4670 All-in-One Printer
HP Deskjet Ink Advantage 5525 e-All-in-One
HP DeskJet Ink Advantage 5570 All-in-One printer
HP DeskJet Ink Advantage 5570 All-in-One printer
HP Deskjet Ink Advantage 6525 e-All-in-One
HP Envy 120 Series
HP ENVY 4500 series
HP ENVY 4500 series
HP ENVY 4500 series
HP ENVY 4500 series
HP ENVY 4510 All-in-One Printer
HP ENVY 4520 series
HP ENVY 4520 series
HP ENVY 4520 series
HP ENVY 4520 series
HP ENVY 4520 series
HP ENVY 4520 series
HP ENVY 4520 series
HP ENVY 5000 series
HP ENVY 5000 series
HP ENVY 5000 series
HP ENVY 5530 series
HP ENVY 5530 series
HP ENVY 5540 All-in-One Printer
HP ENVY 5540 All-in-One Printer
HP ENVY 5540 All-in-One Printer
HP ENVY 5540 All-in-One Printer
HP ENVY 5640 series
HP ENVY 5640 series
HP ENVY 5640 series
HP ENVY 5640 series
HP ENVY 5660 series
HP ENVY 5660 series
HP ENVY 5660 series
HP ENVY 7640 series
HP ENVY Photo 6200 All-in-One Printerseries
HP ENVY Photo 7100 All-in-One Printerseries
HP ENVY Photo 7100 All-in-One Printerseries
HP Ink Tank 310
HP Ink Tank 310
HP Ink Tank Wireless 410
HP Ink Tank Wireless 410
HP Ink Tank Wireless 410
HP OfficeJet 200 Mobile series
HP OfficeJet 200 Mobile series
HP OfficeJet 202 Mobile series
HP OfficeJet 202 Mobile series
HP OfficeJet 252 Mobile All-in-One
HP Officejet 2620 series
HP Officejet 2620 series
HP Officejet 3830 e-All-in-One Printer
HP Officejet 3830 e-All-in-One Printer
HP Officejet 3830 e-All-in-One Printer
HP Officejet 4610 e-All-in-One Printer
HP Officejet 4620 e-All-in-One Printer
HP Officejet 4622 e-All-in-One Printer
HP Officejet 4630 e-All-in-One Printerseries
HP Officejet 4630 e-All-in-One Printerseries
HP OfficeJet 4650 All-in-One Printer
HP OfficeJet 4650 All-in-One Printer
HP OfficeJet 4650 All-in-One Printer
HP OfficeJet 4650 All-in-One Printer
HP OfficeJet 4650 All-in-One Printer
HP OfficeJet 5200 AlI-in-One Printer
HP OfficeJet 5200 AlI-in-One Printer
HP OfficeJet 5200 AlI-in-One Printer
HP Officejet 5740 series
HP Officejet 5740 series
HP Officejet 5740 series
HP Officejet 6220 / HP Officejet Pro 6230 ePrinter
HP Officejet 6220 / HP Officejet Pro 6230 ePrinter
HP OfficeJet 6600 e-All-in-One
HP OfficeJet 6700 Premium e-All-in-One
HP Officejet 6810/6820 e-All-in-One Printer
HP Officejet 6810/6820 e-All-in-One Printer
HP OfficeJet 6950 All-in-One
HP OfficeJet 6950 All-in-One
HP OfficeJet 6950 All-in-One
HP OfficeJet 6960 All-in-One
HP OfficeJet Pro 6960 All-in-One
HP OfficeJet Pro 6960 All-in-One
HP Officejet 7110 Wide Format ePrinter
HP Officejet 7510 Wide Format All-in-One Printer
HP Officejet 7612 Wide Format e-All-in-One
HP Officejet Pro 251dw Printer
HP Officejet Pro 276dw Multifunction Printer
HP Officejet Pro 6830 e-All-in-One Printer
HP Officejet Pro 6830 e-All-in-One Printer
HP OfficeJet Pro 6970 All-in-One Printer
HP OfficeJet Pro 6970 All-in-One Printer
HP OfficeJet Pro 7720 Wide Format All-in-One
HP OfficeJet Pro 7730 Wide Format All-in-One
HP OfficeJet Pro 7740 Wide Format All-in-One
HP OfficeJet Pro 7740 Wide Format All-in-One
HP OfficeJet Pro 7740 Wide Format All-in-One
HP OfficeJet Pro 8210 Printer
HP OfficeJet Pro 8216
HP OfficeJet Pro 8216
HP OfficeJet Pro 8216
HP OfficeJet Pro 8600A e-All-in-One
HP OfficeJet Pro 8600A Plus e-All-in-One
HP OfficeJet Pro 8600A Premium e-All-in-One
HP Officejet Pro 8610 e-All-in-One Printer
HP Officejet Pro 8610 e-All-in-One Printer
HP Officejet Pro 8610 e-All-in-One Printer
HP Officejet Pro 8610 e-All-in-One Printer
HP Officejet Pro 8610 e-All-in-One Printer
HP Officejet Pro 8620 e-All-in-One Printer
HP Officejet Pro 8620 e-All-in-One Printer
HP Officejet Pro 8630 e-All-in-One Printer
HP Officejet Pro 8640 e-All-in-One Printer
HP Officejet Pro 8660 e-All-in-One Printer
HP OfficeJet Pro 8710 All-in-One Printer
HP OfficeJet Pro 8710 All-in-One Printer
HP OfficeJet Pro 8710 All-in-One Printer
HP OfficeJet Pro 8710 All-in-One Printer
HP OfficeJet Pro 8710 All-in-One Printer
HP OfficeJet Pro 8710 All-in-One Printer
HP OfficeJet Pro 8710 All-in-One Printer
HP OfficeJet Pro 8710 All-in-One Printer
HP OfficeJet Pro 8720 All-in-One Printer
HP OfficeJet Pro 8720 All-in-One Printer
HP OfficeJet Pro 8720 All-in-One Printer
HP OfficeJet Pro 8720 All-in-One Printer
HP OfficeJet Pro 8720 All-in-One Printer
HP OfficeJet Pro 8720 All-in-One Printer
HP OfficeJet Pro 8720 All-in-One Printer
HP OfficeJet Pro 8720 All-in-One Printer
HP OfficeJet Pro 8720 All-in-One Printer
HP OfficeJet Pro 8730
HP OfficeJet Pro 8732M All-in-One Printer
HP OfficeJet Pro 8740
HP Photosmart 5520 series e-All-in-One
HP Photosmart 5521 e-All-in-One
HP Photosmart 5522 e-All-in-One
HP Photosmart 5524 e-All-in-One
HP Photosmart 5525 e-All-in-One
HP Photosmart 6520 e-All-in-One
HP Photosmart 7520 series
HP Photosmart 7520 series
HP Smart Tank Wireless 450
HP Smart Tank Wireless 450

Impact:   A remote user can send a file to the target system to execute arbitrary code on the target system.
Solution:   The vendor has issued a fix, available at:

https://support.hp.com/us-en/drivers

The vendor advisory is available at:

https://support.hp.com/us-en/document/c06097712

Vendor URL:  support.hp.com/us-en/document/c06097712 (Links to External Site)
Cause:   Boundary error

Message History:   None.


 Source Message Contents



[Original Message Not Available for Viewing]


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2019, SecurityGlobal.net LLC