PT-2017-8479 · Lexmark · Lexmark Perspective Document Filters

Publicado 2017-01-06 · Atualizado 2017-01-11 · CVE-2016-4336

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lexmark Perspective Document Filters (affected versions not specified)

Description An issue exists in the Bzip2 parsing functionality of the Lexmark Perspective Document Filters conversion, where a crafted Bzip2 document can cause a stack-based buffer overflow, leading to an out-of-bounds write. This could potentially be exploited by an attacker to achieve arbitrary code execution under the right circumstances.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2016-4336

Produtos afetados

Lexmark Perspective Document Filters

Referências · 2

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0173 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-4336 · Nota de Segurança