CVE-2016-4335 Memory corruption in Perceptive Document Filters
A stack-based buffer overflow in Lexmark Perceptive Document Filters allows remote code execution via a crafted XLS file.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-4335?
CVE-2016-4335 is a high-severity memory corruption vulnerability in Lexmark Perceptive Document Filters, published on 6 Jan 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An exploitable buffer overflow exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a stack based buffer overflow resulting in remote code execution.
Weakness: CWE-119
Which versions are affected by CVE-2016-4335?
It affects 1 product.
Products include Lexmark Perceptive Document Filters.
How do I fix CVE-2016-4335?
No fix has been published for CVE-2016-4335 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2016-4335 being exploited?
There is no known exploitation of CVE-2016-4335 in the wild and no public exploit code.
Other vulnerabilities in Lexmark Perceptive Document Filters
- CVE-2016-4336 Memory corruption in Perceptive Document Filters
- CVE-2017-2821 Use after free in Perceptive Document Filters
- CVE-2016-5646 Memory corruption in Perceptive Document Filters
- CVE-2017-2822 Memory corruption in Perceptive Document Filters
- CVE-2017-2806 Information disclosure in Perceptive Document Filters
Sources
Also known as GHSA-fqxc-92f5-9f9x.