CVE-2010-3920

Medium

Description

The Seiko Epson printer driver installers for LP-S9000 before 4.1.11 and LP-S7100 before 4.1.7, or as downloaded from the vendor between May 2010 and 20101125, set weak permissions for the "C:\Program Files" folder, which might allow local users to bypass intended access restrictions and create or modify arbitrary files and directories.

SeverityMedium
CVSS4.6
Exploit probability—
ProductEpson Lp-s7100 Driver
PublishedDec 8, 2010
First seenDec 8, 2010

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
epson lp-s7100_driver_4.1.0No range specified—
epson lp-s7100_driver_4.1.7No range specified—
epson lp-s9000_driver_4.1.0No range specified—
epson lp-s9000_driver_4.1.11No range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.