CVE-2024-9419

{"id": "CVE-2024-9419", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.1}]}, "published": "2024-10-30T18:15:08.260", "references": [{"url": "https://support.hp.com/us-en/document/ish_11505949-11505972-16", "source": "hp-security-alert@hp.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "hp-security-alert@hp.com", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Client / Server PCs with the HP Smart Universal Printing Driver installed are potentially vulnerable to Remote Code Execution and/or Elevation of Privilege. A client using the HP Smart Universal Printing Driver that sends a print job comprised of a malicious XPS file could potentially lead to Remote Code Execution and/or Elevation of Privilege on the PC."}, {"lang": "es", "value": "Los equipos cliente/servidor con el controlador de impresi\u00f3n universal inteligente de HP instalado son potencialmente vulnerables a la ejecuci\u00f3n remota de c\u00f3digo y/o la elevaci\u00f3n de privilegios. Un cliente que utilice el controlador de impresi\u00f3n universal inteligente de HP que env\u00ede un trabajo de impresi\u00f3n compuesto por un archivo XPS malicioso podr\u00eda provocar la ejecuci\u00f3n remota de c\u00f3digo y/o la elevaci\u00f3n de privilegios en el equipo."}], "lastModified": "2024-11-01T12:57:03.417", "sourceIdentifier": "hp-security-alert@hp.com"}