PT-2017-8742 · Lexmark · Lexmark Perspective Document Filters

Published 2017-01-06 · Updated 2017-01-10 · CVE-2016-5646

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Lexmark Perceptive Document Filters library (affected versions not specified)

Description A heap overflow issue exists in the Compound Binary File Format (CBFF) parser functionality. This can be triggered by a specially crafted CBFF file, potentially leading to code execution. An attacker can exploit this by sending a malformed file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-5646

Affected Products

Lexmark Perspective Document Filters

References · 3

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0185 · Exploit
• https://osv.dev/vulnerability/CVE-2016-5646 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5646 · Security Note