Secunia

A vulnerability has been reported in Xerox Document Centre, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an unspecified memory corruption error in the MicroServer Web Server when processing URLs. This can be exploited via a specially crafted URL to cause the web server to restart.

The vulnerability affects the following products:
* Document Centre 535/545/555 (version 27.18.017 or prior)
* Document Centre 460/470/480/490 (versions 19.01.037 through 19.05.521 and versions 19.5.902 through 19.5.912)
* Document Centre 420/426/432/440 (with ESS 2.1.2 through 2.3.21)
* Document Centre 425/432/440 (with ESS 3.0.5.4 through 3.2.30)
* Document Centre 430 (with ESS 3.3.24 through 3.3.30)

Solution
Apply patch:
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Original Advisory
http://www.xerox.com/downloads/usa/en/c/cert_XRX05_004.pdf

Deep Links
Links available in Customer Area