PT-2006-7082 · Xerox · Xerox Workcentre+1

Published 2006-12-11 · Updated 2008-09-05 · CVE-2006-6473

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xerox WorkCentre and WorkCentre Pro versions prior to 12.050.03.000 Xerox WorkCentre and WorkCentre Pro versions 13.x prior to 13.050.03.000 Xerox WorkCentre and WorkCentre Pro versions 14.x prior to 14.050.03.000

Description The issue is related to multiple unspecified vulnerabilities with unknown impact and attack vectors. These vulnerabilities are associated with three main problems: (1) an Immediate Image Overwrite (IIO) error message at the Local User Interface (LUI) when the overwrite fails, (2) an IIO failure that occurs when a Held Job is deleted, and (3) an On Demand Image Overwrite failure when the overwrite exceeds 2 Gb.

Recommendations For Xerox WorkCentre and WorkCentre Pro versions prior to 12.050.03.000, update to version 12.050.03.000 or later. For Xerox WorkCentre and WorkCentre Pro versions 13.x prior to 13.050.03.000, update to version 13.050.03.000 or later. For Xerox WorkCentre and WorkCentre Pro versions 14.x prior to 14.050.03.000, update to version 14.050.03.000 or later.

Fix

Related Identifiers

CVE-2006-6473

Affected Products

Xerox Workcentre

Xerox Workcentre Pro

References · 3

• http://secunia.com/advisories/23265 · Vendor Advisory
• http://xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-6473 · Security Note