CVE-2006-6437: High severity Xerox WorkCentre vulnerability

Published Dec 10, 2006

Updated

ops3-dmn in Xerox WorkCentre and WorkCentre Pro before 12.050.03.000, 13.x before 13.050.03.000, and 14.x before 14.050.03.000 allows attackers to cause a denial of service (application crash and core dump) via a certain PS file.

Affected Software

6 affected components

Xerox WorkCentre=12.060.17.000

Xerox WorkCentre=13.060.17.000

Xerox WorkCentre=14.060.17.000

Xerox WorkCentre=12.060.17.000

Xerox WorkCentre=13.060.17.000

Xerox WorkCentre=14.060.17.000

Remediation

Patch Available

http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf

Event History

Dec 10, 2006

CVE Published

11:28 AM

Data Sourced

via NVD·11:28 AM

RemedyDescriptionSeverityAffected Software

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-6437?

CVE-2006-6437 is classified as a denial of service vulnerability that can cause application crashes.

How do I fix CVE-2006-6437?

To fix CVE-2006-6437, upgrade to Xerox WorkCentre firmware version 12.050.03.000, 13.050.03.000, or 14.050.03.000 or later.

Which products are affected by CVE-2006-6437?

CVE-2006-6437 affects specific versions of the Xerox WorkCentre and WorkCentre Pro printers.

What type of attack does CVE-2006-6437 allow?

CVE-2006-6437 allows attackers to execute a denial of service attack via a specially crafted PS file.

Is there a workaround for CVE-2006-6437?

There are no known specific workarounds for CVE-2006-6437; updating the firmware is the recommended approach.