Description
Improper Restriction of XML External Entity Reference in various Lexmark printer drivers for Windows allows attacker to disclose sensitive information to an arbitrary URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Lexmark | Universal Print Driver | < 3.0.6.0 | 3.0.6.0 |
| Lexmark | Printer Software G2 | < 2.17.0.0 | 2.17.0.0 |
Advisories 1
- WID-SEC-2025-1878 Lexmark Universal Print Driver: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Aug 20, 2025