|
Xerox CopyCentre / WorkCentre Pro Multiple Denial of Service Vulnerabilities
|
|
Secunia Advisory:
|
SA19146
|
|
|
Release Date:
|
2006-03-08
|
|
Last Update:
|
2006-03-16
|
|
Popularity:
|
6,405 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
Unknown
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Xerox CopyCentre
Xerox WorkCentre Pro
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2006-1136
CVE-2006-1137
CVE-2006-1138
CVE-2006-1139
|
|
Description:
Some vulnerabilities have been reported in Xerox CopyCentre and Xerox WorkCentre Pro, where one has an unknown impact, and others can be exploited by malicious people to cause a DoS (Denial of Service).
1) An unspecified boundary error in the PostScript file interpreter can be exploited to cause a buffer overflow.
Successful exploitation causes a denial of service on a vulnerable device.
2) Two unspecified errors in the handling of PostScript files can be exploited to cause a denial of service on a vulnerable device via a specially crafted PostScript file.
3) An unspecified error in the built-in web server can be exploited to cause a memory corruption.
Successful exploitation causes a denial of service on a vulnerable device.
4) An unspecified error in the ESS / Network Controller causes an image overwrite to fail in certain situations after a power loss.
The vulnerabilities affect the following products:
* Xerox CopyCentre C65, C75, and C90.
* Xerox WorkCentre Pro 65, 75, and 90.
Solution:
Install System Software Version 1.001.02.074 or 1.001.02.716 (the software versions can be obtained by contacting Xerox customer support).
Provided and/or discovered by:
Reported by the vendor.
Changelog:
2006-03-16: Added CVE references.
Original Advisory:
http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdf
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
