CVE-2011-4786

HighPublished

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto...

Published: Jan 12, 2012
Updated: Sep 17, 2024
Assigning CNA: hp
Evidence observed: Jan 18, 2012

Primary CVSS

9.3/ 10High

nvd · CVSS 2.0

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS probability estimate

39.2%

Moderate · next 30 days

Percentile: 98.6%
Model date: Oct 13, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

A certain ActiveX control in HPTicketMgr.dll in HP Easy Printer Care Software 2.5 and earlier allows remote attackers to download an arbitrary program onto a client machine, and execute this program, via unspecified vectors, a different vulnerability than CVE-2011-2404 and CVE-2011-4787.

Sources

Repository evidence: Files: 1 · Repositories: 1

1 Module

HP Easy Printer Care XMLCacheMgr Class ActiveX Control Remote Code ExecutionModule
modules/exploits/windows/browser/hp_easy_printer_care_xmlcachemgr.rb
Metasploit Framework modules
ExploitEvidence observed: Sep 26, 2026Revision: 6144ecdd0f63Related tool
Declared conditions
- platform: Windows($.exploit_windows/browser/hp_easy_printer_care_xmlcachemgr.platform)
- verification: check_not_declared($.exploit_windows/browser/hp_easy_printer_care_xmlcachemgr.check)

HP Easy Printer Care - XMLCacheMgr Class ActiveX Control Remote Code Execution (Metasploit)Exploit

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.