Lexmark Perceptive Document Filters CVE-2017-2821 Use After Free Remote Code Execution Vulnerability

Bugtraq ID:	100510
Class:	Boundary Condition Error
CVE:	CVE-2017-2821
Remote:	Yes
Local:	No
Published:	Aug 28 2017 12:00AM
Updated:	Aug 28 2017 12:00AM
Credit:	Marcin 'Icewall' Noga from Cisco Talos.
Vulnerable:	Lexmark Perceptive Document Filters 11.4.0.2452 Lexmark Perceptive Document Filters 11.3.0.2400
Not Vulnerable:

Lexmark Perceptive Document Filters CVE-2017-2821 Use After Free Remote Code Execution Vulnerability

Lexmark Perceptive Document Filters is prone to a remote code-execution vulnerability.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts will likely result in denial-of-service conditions.

Lexmark Perspective Document Filters 11.3.0.2400 and 11.4.0.2452 are vulnerable.

Lexmark Perceptive Document Filters CVE-2017-2821 Use After Free Remote Code Execution Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Lexmark Perceptive Document Filters CVE-2017-2821 Use After Free Remote Code Execution Vulnerability

References:

• Lexmark Homepage (Lexmark)
  
• TALOS-2017-0322 Lexmark Perceptive Document Filters PDF GfxFont Code Execution V (Talos Intelligence)