Lexmark Perceptive Document Filters XLS ShapeHLink Information Disclosure Vulnerability(CVE-2017-2806)

Summary An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a arbitrary read resulting in memory disclosure. The vulnerability was confirmed on versions 11.3.0.2228 and 11.3.0.2400 Tested...

CVE-2017-2806

CVE-2017-2806 details (normal mode). The Lexmark Perceptive Document Filters XLS parsing code is vulnerable to an arbitrary memory read through the Hyperlink object parsing path. An attacker-supplied XLS file can cause the library to read past intended buffers via a two-field string structure (di...