Multiple HP LaserJet Printers Unauthorized Access and Denial of Service Vulnerability

Bugtraq ID:	37070
Class:	Design Error
CVE:	CVE-2009-3842
Remote:	Yes
Local:	No
Published:	Nov 19 2009 12:00AM
Updated:	Dec 14 2009 06:34PM
Credit:	Reported by the vendor
Vulnerable:	HP Color LaserJet M3530 Multifunction Printer 53.021.2 HP Color LaserJet CP3525 Printer 05.058.4
Not Vulnerable:	HP Color LaserJet M3530 Multifunction Printer 53.031.4 HP Color LaserJet CP3525 Printer 05.059.3

Multiple HP LaserJet Printers Unauthorized Access and Denial of Service Vulnerability

Multiple HP LaserJet printers are prone to a security vulnerability that may result in a denial-of-service condition or unauthorized access.

Successful exploits will allow attackers to gain unauthorized access to data or crash the affected device.

This issue affects the following printers and corresponding firmware:

HP Color LaserJet M3530 Multifunction Printer prior to firmware 53.031.4
HP Color LaserJet CP3525 Printer prior to firmware 05.059.3

Multiple HP LaserJet Printers Unauthorized Access and Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple HP LaserJet Printers Unauthorized Access and Denial of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Multiple HP LaserJet Printers Unauthorized Access and Denial of Service Vulnerability

References:

• Micro News Homepage (phptoys)