CVE-2017-2822: Buffer Overflow

Published Sep 5, 2017

Updated

An exploitable code execution vulnerability exists in the image rendering functionality of Lexmark Perceptive Document Filters 11.3.0.2400. A specifically crafted PDF can cause a function call on a corrupted DCTStream to occur, resulting in user controlled data being written to the stack. A maliciously crafted PDF file can be used to trigger this vulnerability.

Affected Software

1 affected component

Lexmark Perceptive Document Filters=11.3.0.2400

Event History

Sep 5, 2017

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-2822?

CVE-2017-2822 has been assigned a high severity rating due to its potential for code execution.

How do I fix CVE-2017-2822?

To fix CVE-2017-2822, update Lexmark Perceptive Document Filters to the latest version that addresses this vulnerability.

What systems are affected by CVE-2017-2822?

CVE-2017-2822 specifically affects Lexmark Perceptive Document Filters version 11.3.0.2400.

What kind of attacks does CVE-2017-2822 enable?

CVE-2017-2822 enables remote attackers to execute arbitrary code via crafted PDF files.

What is the exploit mechanism for CVE-2017-2822?

CVE-2017-2822 exploits a flaw in the image rendering functionality that results in uncontrolled data being written to the stack.