Description
Sharp and Toshiba Tec MFPs provide the web page to download data, where query parameters in HTTP requests are improperly processed and resulting in an Out-of-bounds Read vulnerability.
Crafted HTTP requests may cause affected products crashed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Sharp | Sharp Digital Full-color MFPs and Monochrome MFPs | see the information provided by Sharp Corporation | — |
| Toshiba Tec | e-STUDIO 908 | T2.12.h3.00 and earlier versions | — |
| Toshiba Tec | e-STUDIO 1058 | T1.01.h4.00 and earlier versions | — |
| Toshiba Tec | e-STUDIO 1208 | T1.01.h4.00 and earlier versions | — |