CVE-2011-2404

CVE-2011-2404 describes a critical vulnerability in the HPTicketMgr.dll ActiveX control within HP Easy Printer Care Software versions 2.5 and earlier. This flaw allows remote attackers to download and execute arbitrary programs on a client machine, leading to potential compromise of the system. With a CVSS score of 7.5 (AV:N/AC:L/Au:N/C:P/I:P/A:P), it represents a high-severity risk due to its network-based attack vector, low access complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in KEV, a Metasploit module exists for this vulnerability, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.