CVE:CVE-2012-3272
CNNVD:CNNVD-201212-090
惠普(HP)是全球领先高科技提供商，提供笔记本、台式电脑、工作站等全线产品。
下列惠普激光和彩色激光打印机中存在跨站脚本漏洞。通过未明向量，远程攻击者利用该漏洞注入任意web脚本或HTML。
HP Color LaserJet CM3530固件53.190.9之前的版本、Color LaserJet CM60xx固件52.210.9之前的版本、Color LaserJet CP3525固件06.140.3 18之前的版本、Color LaserJet CP4xxx固件07.120.6之前的版本、Color LaserJet CP6015固件04.160.3之前的版本、LaserJet P3015固件07.140.3之前的版本、LaserJet P4xxx固件04.170.3之前的版本。
solution:Upgrade hp color_laserjet_cm3530 to a higher version than 53.190.8,and avoid the version (,53.190.8]; Upgrade hp color_laserjet_cm60xx to a higher version than 53.190.8,and avoid the version (,53.190.8]; Upgrade hp color_laserjet_cp3525 to a higher version than 06.140.3.17,and avoid the version (,06.140.3.17]; Upgrade hp color_laserjet_cp4xxx to a higher version than 07.120.5,and avoid the version (,07.120.5]; Upgrade hp color_laserjet_cp6015 to a higher version than 04.160.2,and avoid the version (,04.160.2]; Upgrade hp laserjet_p3015 to a higher version than 07.140.2,and avoid the version (,07.140.2]; Upgrade hp laserjet_p4xxx to a higher version than 04.170.2,and avoid the version (,04.170.2]