HP Point of Sale PCs Running Windows With OPOS Drivers Arbitrary Code Execution Vulnerability

Bugtraq ID:	72969
Class:	Unknown
CVE:	CVE-2014-7894 CVE-2014-7888 CVE-2014-7889 CVE-2014-7890 CVE-2014-7891 CVE-2014-7892 CVE-2014-7893 CVE-2014-7895 CVE-2014-7897 CVE-2014-7898
Remote:	Yes
Local:	No
Published:	Mar 04 2015 12:00AM
Updated:	Mar 04 2015 12:00AM
Credit:	HP and Ariele Caltabiano.
Vulnerable:
Not Vulnerable:

HP Point of Sale PCs Running Windows With OPOS Drivers Arbitrary Code Execution Vulnerabilities

HP Point of Sale PCs running Windows with OPOS Drivers are prone to multiple arbitrary code-execution vulnerabilities.

Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts may result in a denial-of-service condition.

HP Point of Sale PCs running OPOS drivers prior to 1.13.003 are vulnerable.

HP Point of Sale PCs Running Windows With OPOS Drivers Arbitrary Code Execution Vulnerability

Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

HP Point of Sale PCs Running Windows With OPOS Drivers Arbitrary Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

HP Point of Sale PCs Running Windows With OPOS Drivers Arbitrary Code Execution Vulnerabilities

References: