CVE-2017-2822 — HIGH (7.5) — White Hats Nepal

Vulnerability Description

An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically crafted PDF can cause a function call on a corrupted DCTStream to occur, resulting in user controlled data being written to the stack. A maliciously crafted PDF file can be used to trigger this vulnerability.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Lexmark	Perceptive Document Filters	11.3.0.2400

Related Weaknesses (CWE)

CWE-119

References

http://www.securityfocus.com/bid/100512Third Party AdvisoryVDB Entry
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0323Third Party Advisory
http://www.securityfocus.com/bid/100512Third Party AdvisoryVDB Entry
https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0323Third Party Advisory

FAQ

What is CVE-2017-2822?

CVE-2017-2822 is a vulnerability with a CVSS score of 7.5 (HIGH). An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically crafted PDF can cause a function call on a co...

How severe is CVE-2017-2822?

CVE-2017-2822 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-2822?

Check the references section above for vendor advisories and patch information. Affected products include: Lexmark Perceptive Document Filters.