CVE-2011-4167

Currently unrated

Key Information:

Vendor
HP
Status
Managed Printing Administration
Vendor
CVE Published:
27 December 2011

Summary

Stack-based buffer overflow in MPAUploader.dll in HP Managed Printing Administration before 2.6.4 allows remote attackers to execute arbitrary code via a long filename parameter in an uploadfile action to Default.asp.

References

http://h20000.www2.hp.com/bizsupport/TechSupport/Document...
vendor-advisoryx_refsource_HP
http://h20000.www2.hp.com/bizsupport/TechSupport/Document...
vendor-advisoryx_refsource_HP
http://www.zerodayinitiative.com/advisories/ZDI-11-353/
x_refsource_MISC

EPSS Score

35% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.