HP Easy Printer Care Software 'HPTicketMgr.dll' ActiveX Control Remote Code Execution Vulnerability

Bugtraq ID:	49100
Class:	Unknown
CVE:	CVE-2011-2404
Remote:	Yes
Local:	No
Published:	Aug 09 2011 12:00AM
Updated:	Dec 13 2011 07:38PM
Credit:	HP
Vulnerable:	HP Easy Printer Care Software 2.5
Not Vulnerable:

HP Easy Printer Care Software 'HPTicketMgr.dll' ActiveX Control Remote Code Execution Vulnerability

HP Easy Printer Care Software running on Windows is prone to a remote code-execution vulnerability.

Successfully exploiting this issue allows an attacker to execute arbitrary code in the context of the application running the affected control (typically Internet Explorer).

HP Easy Printer Care Software 2.5 and prior versions are vulnerable.

HP Easy Printer Care Software 'HPTicketMgr.dll' ActiveX Control Remote Code Execution Vulnerability

To exploit this issue, an attacker must entice a victim to view a malicious Web page.

The following exploit is available:

• /data/vulnerabilities/exploits/49100.rb

HP Easy Printer Care Software 'HPTicketMgr.dll' ActiveX Control Remote Code Execution Vulnerability

Solution:
Vendor updates are available. Please see the referenced advisory for more information.

HP Easy Printer Care Software 'HPTicketMgr.dll' ActiveX Control Remote Code Execution Vulnerability

References:

• HP Easy Printer Care Software (HP)
  
• HP Easy Printer Care XMLSimpleAccessor Class ActiveX Control Remote Code Executi (Zero Day Initiative)
  
• Microsoft Knowledge Base Article 240797 (Microsoft)
  
• [security bulletin] HPSBPI02698 SSRT100404 rev.1 - HP Easy Printer Care Software (HP)
  
• Microsoft Security Bulletin MS11-090 (Microsoft)