PT-2017-8479 · Lexmark · Lexmark Perspective Document Filters

Published 2017-01-06 · Updated 2017-01-11 · CVE-2016-4336

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Lexmark Perspective Document Filters (affected versions not specified)

Description An issue exists in the Bzip2 parsing functionality of the Lexmark Perspective Document Filters conversion, where a crafted Bzip2 document can cause a stack-based buffer overflow, leading to an out-of-bounds write. This could potentially be exploited by an attacker to achieve arbitrary code execution under the right circumstances.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2016-4336

Affected Products

Lexmark Perspective Document Filters

References · 2

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0173 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2016-4336 · Security Note