Summary
Ein entfernter, authentisierter oder anonymer Angreifer kann mehrere Schwachstellen in Lexmark Laser Printers und Lexmark Multifunction Printer ausnutzen, um beliebigen Programmcode auszuführen.
Product
Lexmark ist ein Hersteller von Druckern und Druckerzubehör.
Vulnerabilities 4
-
Critical 9.1
An input validation vulnerability in the SE Menu allows an attacker to execute arbitrary code.
The SE menu contains information used by Lexmark to diagnose device errors. A vulnerability in one of the SE menu routines can be leveraged by an attacker to execute arbitrary code.
-
Critical 9.0
A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
A buffer overflow vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
-
Critical 9.0
A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
A heap corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
-
Critical 9.0
A vulnerability has been identified in the PostScript interpreter in various Lexmark devices.
A memory corruption vulnerability has been identified in PostScript interpreter in various Lexmark devices. The vulnerability can be leveraged by an attacker to execute arbitrary code.
Revision history
-
#1
Initiale Fassung
References
-
Lexmark Security Advisory vom 2024-01-21
https://publications.lexmark.com/publications/security-alerts/CVE-2023-50734.pdf
-
Lexmark Security Advisory vom 2024-01-21
https://publications.lexmark.com/publications/security-alerts/CVE-2023-50735.pdf
-
Lexmark Security Advisory vom 2024-01-21
https://publications.lexmark.com/publications/security-alerts/CVE-2023-50736.pdf
-
Lexmark Security Advisory vom 2024-01-21
https://publications.lexmark.com/publications/security-alerts/CVE-2023-50737.pdf