CVE-2024-0794: Certain LaserJet Pro, HP Enterprise LaserJet, HP LaserJet Managed Printers – Potential Buffer Overflow, Potential Remote Code Execution
Published Feb 20, 2024
·Updated
Certain HP LaserJet Pro, HP Enterprise LaserJet, and HP LaserJet Managed Printers are potentially vulnerable to Remote Code Execution due to buffer overflow when rendering fonts embedded in a PDF file.
Affected Software
3 affected components
HP LaserJet Pro
HP Enterprise LaserJet
HP LaserJet Managed Printers
Event History
Feb 20, 2024
CVE Published
via MITRE·05:23 PM
Data Sourced
via MITRE·05:23 PM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-0794?
CVE-2024-0794 has been classified as having a high severity due to its potential to allow Remote Code Execution.
2
How do I fix CVE-2024-0794?
To mitigate CVE-2024-0794, users should update their HP LaserJet printers to the latest firmware version provided by HP.
3
Which HP products are affected by CVE-2024-0794?
CVE-2024-0794 affects various models of HP LaserJet Pro, HP Enterprise LaserJet, and HP LaserJet Managed Printers.
4
Can CVE-2024-0794 be exploited remotely?
Yes, CVE-2024-0794 can be exploited remotely by manipulating PDF files with maliciously crafted fonts.
5
What type of attack does CVE-2024-0794 involve?
CVE-2024-0794 involves a buffer overflow attack associated with font rendering in PDFs.