NetSight
IP …
medium4.6

CVE-2010-3920

The Seiko Epson printer driver installers for LP-S9000 before 4.1.11 and LP-S7100 before 4.1.7, or as downloaded from the vendor between May 2010 and 20101125,…

Impact

The Seiko Epson printer driver installers for LP-S9000 before 4.1.11 and LP-S7100 before 4.1.7, or as downloaded from the vendor between May 2010 and 20101125, set weak permissions for the "C:\Program Files" folder, which might allow local users to bypass intended access restrictions and create or modify arbitrary files and directories.

Affected products

VendorProductAffected versions
EpsonLp-S7100 Driver 4.1.0
All versions
EpsonLp-S7100 Driver 4.1.7
All versions
EpsonLp-S9000 Driver 4.1.0
All versions
EpsonLp-S9000 Driver 4.1.11
All versions

Weakness classification

CWE-264

References