Directory traversal vulnerability in the PostScript Interpreter, as used on the HP LaserJet 4xxx, 5200, 90xx, M30xx, M4345, M50xx, M90xx, P3005, and P4xxx; LaserJet Enterprise P3015; Color LaserJet 3xxx, 47xx, 5550, 9500, CM60xx, CP35xx, CP4005, and CP6015; Color LaserJet Enterprise CP4xxx; and 9250c Digital Sender with model-dependent firmware through 52.x allows remote attackers to read arbitrary files via unknown vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Color_laserjet_3000 | Hp | q7534a (including) | q7534a (including) |
| Color_laserjet_3800 | Hp | q5981a (including) | q5981a (including) |
| Color_laserjet_4700 | Hp | q7492a (including) | q7492a (including) |
| Color_laserjet_4730_mfp | Hp | cb480a (including) | cb480a (including) |
| Color_laserjet_5550 | Hp | q3714a (including) | q3714a (including) |
| Color_laserjet_9500_mfp | Hp | c8549a (including) | c8549a (including) |
| Color_laserjet_cm6030_mfp | Hp | ce664a (including) | ce664a (including) |
| Color_laserjet_cm6040_mfp | Hp | q3939a (including) | q3939a (including) |
| Color_laserjet_cp3505 | Hp | cb442a (including) | cb442a (including) |
| Color_laserjet_cp3525 | Hp | cc469a (including) | cc469a (including) |
| Color_laserjet_cp4005 | Hp | cb503a (including) | cb503a (including) |
| Color_laserjet_cp6015 | Hp | q3932a (including) | q3932a (including) |
| Color_laserjet_enterprise_cp4025 | Hp | cc490a (including) | cc490a (including) |
| Color_laserjet_enterprise_cp4525 | Hp | cc493a (including) | cc493a (including) |
| Digital_sender_9250c | Hp | cb472a (including) | cb472a (including) |
| Laserjet_4240 | Hp | q7785a (including) | q7785a (including) |
| Laserjet_4250 | Hp | q5400a (including) | q5400a (including) |
| Laserjet_4345_mfp | Hp | q3942a (including) | q3942a (including) |
| Laserjet_4350 | Hp | q5407a (including) | q5407a (including) |
| Laserjet_5200l | Hp | q7543a (including) | q7543a (including) |
| Laserjet_5200n | Hp | q7543a (including) | q7543a (including) |
| Laserjet_9040 | Hp | q7697a (including) | q7697a (including) |
| Laserjet_9040_mfp | Hp | q3721a (including) | q3721a (including) |
| Laserjet_9050 | Hp | q7697a (including) | q7697a (including) |
| Laserjet_9050_mfp | Hp | q3721a (including) | q3721a (including) |
| Laserjet_enterprise_p3015 | Hp | ce526a (including) | ce526a (including) |
| Laserjet_m3027_mfp | Hp | cb416a (including) | cb416a (including) |
| Laserjet_m3035_mfp | Hp | cb414a (including) | cb414a (including) |
| Laserjet_m3035_mfp | Hp | cc519a (including) | cc519a (including) |
| Laserjet_m4345_mfp | Hp | cb425a (including) | cb425a (including) |
| Laserjet_m5025_mfp | Hp | q7840a (including) | q7840a (including) |
| Laserjet_m5035_mfp | Hp | q7829a (including) | q7829a (including) |
| Laserjet_m9040_mpf | Hp | cc394a (including) | cc394a (including) |
| Laserjet_m9050_mpf | Hp | cc395a (including) | cc395a (including) |
| Laserjet_p3005 | Hp | q7812a (including) | q7812a (including) |
| Laserjet_p4014 | Hp | cb507a (including) | cb507a (including) |
| Laserjet_p4015 | Hp | cb509a (including) | cb509a (including) |
| Laserjet_p4515 | Hp | cb514a (including) | cb514a (including) |
References
- http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023
- https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742
- http://www.verisigninc.com/en_US/products-and-services/network-intelligence-availability/idefense/public-vulnerability-reports/articles/index.xhtml?id=1023
- https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03744742