Hacking Printers Advisory 1

TL;DR: In the scope of academic research on printer security, various vulnerabilities in network printers and MFPs have been discovered. This is advisory 1 of 6 of the Hacking Printers' series. Each advisory discusses multiple issues of the same category. This post is about manipulating and...

CVE-2016-5646

An exploitable heap overflow vulnerability exists in the Compound Binary File Format CBFF parser functionality of Lexmark Perceptive Document Filters library. A specially crafted CBFF file can cause a code execution. An attacker can send a malformed file to trigger this vulnerability...

CVE-2016-4335

An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution...

CVE-2016-4336

An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted Bzip2 document can lead to a stack-based buffer overflow causing an out-of-bounds write which under the right circumstance could potentially be leveraged ...

CVE-2016-5646

An exploitable heap overflow vulnerability exists in the Compound Binary File Format CBFF parser functionality of Lexmark Perceptive Document Filters library. A specially crafted CBFF file can cause a code execution. An attacker can send a malformed file to trigger this vulnerability...

Stack overflow

An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution...

Heap overflow

An exploitable heap overflow vulnerability exists in the Compound Binary File Format CBFF parser functionality of Lexmark Perceptive Document Filters library. A specially crafted CBFF file can cause a code execution. An attacker can send a malformed file to trigger this vulnerability...

Stack overflow

An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted Bzip2 document can lead to a stack-based buffer overflow causing an out-of-bounds write which under the right circumstance could potentially be leveraged ...

CVE-2016-4336

An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted Bzip2 document can lead to a stack-based buffer overflow causing an out-of-bounds write which under the right circumstance could potentially be leveraged ...

CVE-2016-5646

Summary (CVE-2016-5646) : A heap overflow exists in Lexmark’s Lexmark Perceptive Document Filters CBFF parser. TALOS/NVD/Seebug detail a root cause in the storage handling: during Resolve_Short_Sectors, dword214 is computed as 1 <

CVE-2016-4335

An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution...

CVE-2016-5646

An exploitable heap overflow vulnerability exists in the Compound Binary File Format CBFF parser functionality of Lexmark Perceptive Document Filters library. A specially crafted CBFF file can cause a code execution. An attacker can send a malformed file to trigger this vulnerability...

CVE-2016-4336

CVE-2016-4336 describes an exploitable out-of-bounds write in Lexmark Perceptive Document Filters when parsing Bzip2 content. The issue occurs in the Bzip2 parsing path of the Perspective Document Filters conversion functionality, where a crafted Bzip2 document can trigger a stack-based buffer ov...

CVE-2016-4335

CVE-2016-4335 is a stack-based buffer overflow in Lexmark Perceptive Document Filters during XLS parsing. The root cause is reading a user-controlled size from the header (MSOFBH) and using it for a memcpy into a fixed-size stack buffer, which, for a specific header instance (notably 0xF016, a ms...

Lexmark Perceptive Document Filters Heap Buffer Overflow Vulnerability

Lexmark Perceptive Document Filters is an SDK for converting unstructured documents from Lexmark USA. A heap buffer overflow vulnerability exists in Lexmark Perceptive Document Filters version 11.2.0.1732. A local attacker could exploit this vulnerability to execute arbitrary code in the context ...

Lexmark Perceptive Document Filters Stack Buffer Overflow Vulnerability (CNVD-2016-06323)

Lexmark Perceptive Document Filters is an SDK for converting unstructured documents from Lexmark USA. A stack buffer overflow vulnerability exists in Lexmark Perceptive Document Filters. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected applicati...

Lexmark Perceptive Document Filters Stack Buffer Overflow Vulnerability (CNVD-2016-06324)

Lexmark Perceptive Document Filters is an SDK for converting unstructured documents from Lexmark USA. A stack buffer overflow vulnerability exists in Lexmark Perceptive Document Filters, which stems from the program's failure to perform bounds checking on user-submitted input. A remote attacker...

LexMark Perceptive Document Filters Bzip2 Convert Out of Bounds Write Vulnerability

Talos Vulnerability Report TALOS-2016-0173 LexMark Perceptive Document Filters Bzip2 Convert Out of Bounds Write Vulnerability August 6, 2016 CVE Number CVE-2016-4336 Description An exploitable out of bounds write exists in the Bzip2 parsing of the Perspective Document Filters conversion...

LexMark Perceptive Document Filters XLS Convert Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0172 LexMark Perceptive Document Filters XLS Convert Code Execution Vulnerability August 6, 2016 CVE Number CVE-2016-4335 Description An exploitable buffer overflow exists in the XLS parsing of the Perspective Document Filters conversion functionality. A...

Lexmark Perceptive Document Filters CBFF Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0185 Lexmark Perceptive Document Filters CBFF Code Execution Vulnerability August 6, 2016 CVE Number CVE-2016-5646 Description An exploitable heap overflow vulnerability exists in the Compound Binary File Format CBFF parser functionality of Lexmark Perceptive...