CVE-2016-4336

CVE-2016-4336 describes an exploitable out-of-bounds write in Lexmark Perceptive Document Filters when parsing Bzip2 content. The issue occurs in the Bzip2 parsing path of the Perspective Document Filters conversion functionality, where a crafted Bzip2 document can trigger a stack-based buffer ov...

CVE-2016-5646

An exploitable heap overflow vulnerability exists in the Compound Binary File Format CBFF parser functionality of Lexmark Perceptive Document Filters library. A specially crafted CBFF file can cause a code execution. An attacker can send a malformed file to trigger this vulnerability...

CVE-2016-4335

CVE-2016-4335 is a stack-based buffer overflow in Lexmark Perceptive Document Filters during XLS parsing. The root cause is reading a user-controlled size from the header (MSOFBH) and using it for a memcpy into a fixed-size stack buffer, which, for a specific header instance (notably 0xF016, a ms...

CVE-2016-4336

An exploitable out-of-bounds write exists in the Bzip2 parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted Bzip2 document can lead to a stack-based buffer overflow causing an out-of-bounds write which under the right circumstance could potentially be leveraged ...

CVE-2016-5646

Summary (CVE-2016-5646) : A heap overflow exists in Lexmark’s Lexmark Perceptive Document Filters CBFF parser. TALOS/NVD/Seebug detail a root cause in the storage handling: during Resolve_Short_Sectors, dword214 is computed as 1 <

Lexmark Perceptive Document Filters Stack Buffer Overflow Vulnerability (CNVD-2016-06324)

Lexmark Perceptive Document Filters is an SDK for converting unstructured documents from Lexmark USA. A stack buffer overflow vulnerability exists in Lexmark Perceptive Document Filters, which stems from the program's failure to perform bounds checking on user-submitted input. A remote attacker...

Lexmark Perceptive Document Filters Heap Buffer Overflow Vulnerability

Lexmark Perceptive Document Filters is an SDK for converting unstructured documents from Lexmark USA. A heap buffer overflow vulnerability exists in Lexmark Perceptive Document Filters version 11.2.0.1732. A local attacker could exploit this vulnerability to execute arbitrary code in the context ...

Lexmark Perceptive Document Filters Stack Buffer Overflow Vulnerability (CNVD-2016-06323)

Lexmark Perceptive Document Filters is an SDK for converting unstructured documents from Lexmark USA. A stack buffer overflow vulnerability exists in Lexmark Perceptive Document Filters. An attacker could exploit this vulnerability to execute arbitrary code in the context of an affected applicati...

LexMark Perceptive Document Filters Bzip2 Convert Out of Bounds Write Vulnerability

Talos Vulnerability Report TALOS-2016-0173 LexMark Perceptive Document Filters Bzip2 Convert Out of Bounds Write Vulnerability August 6, 2016 CVE Number CVE-2016-4336 Description An exploitable out of bounds write exists in the Bzip2 parsing of the Perspective Document Filters conversion...

LexMark Perceptive Document Filters XLS Convert Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0172 LexMark Perceptive Document Filters XLS Convert Code Execution Vulnerability August 6, 2016 CVE Number CVE-2016-4335 Description An exploitable buffer overflow exists in the XLS parsing of the Perspective Document Filters conversion functionality. A...

Lexmark Perceptive Document Filters CBFF Code Execution Vulnerability

Talos Vulnerability Report TALOS-2016-0185 Lexmark Perceptive Document Filters CBFF Code Execution Vulnerability August 6, 2016 CVE Number CVE-2016-5646 Description An exploitable heap overflow vulnerability exists in the Compound Binary File Format CBFF parser functionality of Lexmark Perceptive...

support.lexmark.com XSS vulnerability

Vulnerable URL: http://support.lexmark.com/index?page=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check support.lexmark.com SS...

The vulnerability of Lexmark’s microprogramming software allows a hacker to obtain confidential information.

The vulnerability of Lexmark’s microprogramming software is related to the lack of protection for operational data. Exploiting this vulnerability can allow a local attacker to obtain confidential information by directly reading data from non-volatile memory...

Lexmark Printer Sensitive Information Disclosure Vulnerability

Lexmark printer is a printer product. An information disclosure vulnerability exists in the Lexmark printer, where failure to properly handle Erase Printer Memory and Erase Hard Disk operations could allow a local attacker to obtain sensitive information by directly reading non-volatile memory...

CVE-2016-3145

Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on...

CVE-2016-3145

Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on...

Hardcoded credentials

Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on...

CVE-2016-3145

Lexmark printers with firmware ATL before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063 mishandle Erase Printer Memory and Erase Hard Disk actions, which allows physically proximate attackers to obtain sensitive information via direct read operations on...

CVE-2016-3145

Summary of the CVE-2016-3145 issue: Lexmark printers are affected when running firmware ATL.X before ATL.021.063, CB before CB.021.063, PP before PP.021.063, and YK before YK.021.063. The vulnerability arises from improper handling of the Erase Printer Memory and Erase Hard Disk actions, enabling...

The vulnerability of Lexmark’s microprogramming software allows a hacker to bypass the authentication process.

The vulnerability of Lexmark’s microprogramming software exists due to insufficient checking of resource status when resources can be used concurrently. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures by using incorrect detection of resource status...