Use-After-Free Issue in Lexmark Perspective Document Filters
CVE-2017-2821

8.8HIGH

Key Information:

Vendor
Lexmark
Status
Perceptive Document Filters
Vendor
CVE Published:
28 August 2017

Summary

A use-after-free vulnerability has been identified in the PDF parsing capabilities of Lexmark's Perspective Document Filters, specifically versions 11.3.0.2400 and 11.4.0.2452. This issue arises when the application improperly manages memory while processing crafted PDF documents, potentially allowing attackers to exploit this flaw and execute arbitrary code on the affected system.

Affected Version(s)

Perceptive Document Filters 11.3.0.2400 - x86

Perceptive Document Filters 11.4.0.2452 - x86

References

http://www.securityfocus.com/bid/100510
vdb-entryx_refsource_BID
https://www.talosintelligence.com/vulnerability_reports/T...
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.