CVE:CVE-2011-4167
CNNVD:CNNVD-201112-454
HP Managed Printing Administration 2.6.4之前版本中存在漏洞。当解析Default.asp传递的“filename”参数时在MPAUploader.dll3中的边界错误可被利用通过超长字符串导致基于栈的缓冲区溢出。成功利用该漏洞可导致任意代码执行。
solution:Upgrade hp managed_printing_administration to a higher version than 2.6.3,and avoid the version (,2.6.3]