HP has patched a severe vulnerability that has been hidden in a printer driver for 16 years. On Tuesday, SentinelLabs published an analysis of the vulnerability, tracked as CVE-2021-3438 and issued a CVSS score of 8.8. The security issue is described as a “potential buffer overflow in the software drivers for certain HP LaserJet products and Samsung product printers could lead to an escalation of privilege.” According to the researchers , some HP, Xerox, and Samsung printer models contained vulnerable driver software, sold worldwide since 2005. The driver in question, SSPORT.SYS, is automatically installed and activated, whether the model was wireless or cabled. The driver is also loaded automatically by Microsoft’s Windows operating system on PC boot. “This makes the driver a perfect candidate to target since it will always be loaded on the machine even if there is no printer connected,” the researchers say. The vulnerable function in the driver is the acceptance of data without size parameter validation, allowing attackers to overrun the driver’s buffer theoretically. Local attackers could escalate their privileges to a SYSTEM account and run code in kernel mode in order to perform actions including tampering with a target machine. However, SentinelLabs says that the… Read full this story
- See 16-Year-Old Girl Set A World Record For Fastest Slalom Time
- Teen who set up an ingenious app for city parking aged just 16 but almost lost it all due to COVID-19 reveals his seven tips for keeping a business alive during the pandemic
- Maniac schoolgirl, 19, admits butchering Uber driver with machete in random attack gets 27 years
- HP's Labor Day Sale is live: great deals on laptops, monitors, printers, and more
- Streets Of Rage 4's Big New Patch Turns Axel Into A Quicker And Deadlier Fighter
- Valorant 1.07 Patch Notes: Sage Nerfed, Breach Buffed
- Tesco to hire 16,000 new staff after DOUBLING online deliveries during coronavirus
- 10 charges that make consumers scratch their heads
- 75 deals in the Labor Day sales you need to see before they sell out
- This RTX-equipped gaming laptop is just $879 in the Labor Day sales - but there's a catch
HP patches vulnerable driver lurking in printers for 16 years have 337 words, post on www.zdnet.com at July 20, 2021. This is cached page on X-Buy. If you want remove this page, please contact us.