HP details security issue related to cartridges
- Report from Shivaun Albright, HP Chief Technologist of Print Security
- If end user places a non-OEM cartridge in an HP device, it could have malware embedded
- Takes advantage of a vulnerability over the serial interface between cartridge and the device
- Hacker is apparently able to overflow into memory beyond bounds of buffer, giving them ability to inject code into device
- Malware could remain on the device after cartridge is removed