Pre-installed Applications Developed with Portrait Displays SDK Contain Critical Vulnerability

Applications developed using the Portrait Displays software development kit (SDK), versions 2.30 through 2.34, contain a critical vulnerability. 

A local attacker could exploit this vulnerability to take control of an affected system.

The affected applications, pre-installed on some Fujitsu, HP, and Philips devices, are:

• Fujitsu DisplayView Click: Version 6.0 and 6.01. The issue was fixed in Version 6.3.
• Fujitsu DisplayView Click Suite: Version 5. The issue is addressed by patch in Version 5.9.
• HP Display Assistant: Version 2.1. The issue was fixed in Version 2.11.
• HP My Display: Version 2.0. The issue was fixed in Version 2.1.
• Philips Smart Control Premium: Versions 2.23, 2.25. The issue was fixed in Version 2.26.

ref : http://www.kb.cert.org/vuls/id/219739

      http://www.portrait.com/securityupdate.html