جزئیات آسیب‌پذیری

CVE-2024-11347

Lexmark International CX

Access of Resource Using Incompatible Type in Postscript interpreter

CVSS 3.1
7.3بالا

شرح رسمی (انگلیسی)

Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user.

امتیازهای CVSS

امتیازنسخهمنبعبردار
7.3بالا 3.1 CVEProject cvelistV5 (CNA) (Lexmark) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

محصولات آسیب‌پذیر

فروشندهمحصولنسخه‌هامنبع
Lexmark International CX, XC, CS, et. al. v ≤ LW80.GM2.P257 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXLBL.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXTPP.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSTPP.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSTAT.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXTAT.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSTMH.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXTMH.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.TL2.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.PR2.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.PR4.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.SB4.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.SB7.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.DN2.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.DN4.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.DN7.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.TU.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.SA.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.MG.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.GM7.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.GM4.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW90.VY4.P215 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW80.PRL.P257 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW80.SB2.P257 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW80.VYL.P257 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ LW80.VY2.P257 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXTLS.240.076 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MXTLS.240.076 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSTLS.240.076 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MSNSN.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MSTSN.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MXTSN.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSNGV.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSTGV.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXTGV.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXTPC.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSTPC.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MXTCT.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MXTPM.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXTMM.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSTMM.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSTZJ.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSNZJ.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXTZJ.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXNZJ.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MSNGM.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MSTGM.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MXNGM.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MXTGM.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MSNGW.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MSTGW.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MXTGW.240.042 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MSLSG.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MXLSG.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MSLBD.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ MXLBD.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSLBN.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CSLBL.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. v ≤ CXLBN.230.401 CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CSNGV.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CSNZJ.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CSTGV.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CSTLS.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CSTMM.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CSTPC.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CSTZJ.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CXNZJ.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CXTGV.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CXTLS.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CXTMM.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CXTPC.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. CXTZJ.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MSNGM.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MSNGW.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MSNSN.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MSTGM.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MSTGW.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MSTSN.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MXNGM.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MXTCT.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MXTGM.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MXTGW.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MXTLS.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MXTPM.240.200 ≤ v CVEProject cvelistV5 (CNA)
Lexmark International CX, XC, CS, et. al. MXTSN.240.200 ≤ v CVEProject cvelistV5 (CNA)

منابع و راهنماها

۱
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.

اطلاعات

تاریخ انتشار
۱۴۰۳/۱۱/۲۵
آخرین به‌روزرسانی
۱۴۰۳/۱۱/۲۵
وضعیت
منتشرشده
صادرکننده (CNA)
Lexmark

پیش‌بینی بهره‌برداری (EPSS)

۰٫۴۳٪
احتمال بهره‌برداری در ۳۰ روز
۳۷٫۸٪
صدک (نسبت به همه‌ی CVEها)

ارزیابی SSVC (CISA)

قابل خودکارسازی
بله
وضعیت بهره‌برداری
ندارد
اثر فنی
جزئی

ضعف‌ها (CWE)

  • CWE-190
    Integer Overflow or Wraparound