CVE-2011-2404
HP Easy Printer Care Software < 2.5 - Remote Code Execution via HPTicketMgr.dll ActiveX Control
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2011-2404.
PoCs published by Metasploit, Andrea Micalizzi, juan vazquez, including Metasploit module exploits/windows/browser/hp_easy_printer_care_xmlsimpleaccessor.
AI-analyzed exploit summary This Metasploit module exploits a directory traversal vulnerability in HP Easy Printer Care's ActiveX control to achieve remote code execution by uploading a VBS payload and a MOF file to trigger execution via Windows Management Instrumentation.
Description
A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-4786 and CVE-2011-4787.
Exploits (2)
This Metasploit module exploits a directory traversal vulnerability in HP Easy Printer Care's ActiveX control to achieve remote code execution by uploading a VBS payload and a MOF file to trigger execution via Windows Management Instrumentation.
This Metasploit module exploits a directory traversal vulnerability in HP Easy Printer Care's ActiveX control (HPTicketMgr.dll 2.7.2.0) via the 'saveXML' method to achieve remote code execution. It uploads a VBS payload and a MOF file to the target system, leveraging Windows Management Instrumentation (WMI) for execution on Windows systems before Vista.