Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2002-1796: HP ChaiVM EZloader can run unauthorized code

CVE-2002-1796 · published 23 years ago

Summary

The EZloader component used with certain HP LaserJet printers does not correctly check the digital signatures of new services. This weakness lets someone with local access install and run their own code on the printer. Apply the latest HP update or restrict local access to the printer to mitigate the risk.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
hp	chaivm_ezloader	All versions `cpe:2.3:a:hp:chaivm_ezloader:-:::::::*`

Original advisory text

ChaiVM EZloader for HP color LaserJet 4500 and 4550 and HP LaserJet 4100 and 8150 does not properly verify JAR signatures for new services, which allows local users to load unauthorized Chai services.

References

http://online.securityfocus.com/advisories/4317 Broken Link Patch Third Party Advisory VDB Entry Vendor Advisory
http://www.iss.net/security_center/static/9695.php Broken Link
http://www.phenoelit.de/stuff/HP_Chai.txt Broken Link Vendor Advisory
http://www.securityfocus.com/archive/1/284648 Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/5334 Broken Link Third Party Advisory VDB Entry

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-347Improper Verification of Cryptographic Signature

Timeline

Published31 Dec 2002

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2002-1796 · NVD

Track software like this

Free during beta