Integer Overflow Vulnerability in Lexmark Postscript Interpreter
CVE-2024-11347
7.3HIGH
What is CVE-2024-11347?
An integer overflow vulnerability exists in the Postscript interpreter modules of various Lexmark printer models, including the CX, XC, and CS series. This flaw allows attackers to manipulate integer values, potentially leading to execution of arbitrary code with the permissions of an unprivileged user. Exploiting this vulnerability could compromise the security and integrity of affected systems. It is critical for users and administrators to apply available security updates and follow recommended security practices to mitigate the risks associated with this vulnerability.
Affected Version(s)
CX, XC, CS, et. al. 0
CX, XC, CS, et. al. CXTLS.240.200
CX, XC, CS, et. al. 0
References
CVSS V3.1
Score:
7.3
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
