Multiple Lexmark Laser Printers PJL Processing Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	38901
Class:	Boundary Condition Error
CVE:	CVE-2010-0619
Remote:	Yes
Local:	No
Published:	Mar 23 2010 12:00AM
Updated:	Mar 23 2010 12:00AM
Credit:	Francis Provencher from Protek Research Labs
Vulnerable:	Lexmark X94x LC.BR.P049 Lexmark X86x LP.SP.P112 Lexmark X85x LC4.BE.P457 Lexmark X782e LC2.TO.P305c Lexmark X772e LC2.TR.P275 Lexmark X73x LR.FL.P224b Lexmark X65x LR.MN.P224a Lexmark X64xef LC2.TI.P305a Lexmark X646 LC2.MC.P307a Lexmark X644 LC2.MC.P307a Lexmark X642 LC2.MB.P307b Lexmark X546 LL.EL.P424 Lexmark X544 LL.EL.P424 Lexmark X543 LL.EL.P424 Lexmark X46x LR.BS.P224a Lexmark X36x LL.BZ.P424 Lexmark X264 LM1.MT.P110h Lexmark W850 LP.JB.P108WS Lexmark W840 LS.HA.P121 Lexmark T656 LSJ.SJ.P019 Lexmark T654 LR.JP.P224a Lexmark T652 LR.JP.P224a Lexmark T650 LR.JP.P224a Lexmark T64x LS.ST.P240 Lexmark E462 LR.LBH.P224cWS Lexmark E460 LR.LBH.P224a Lexmark E450 LM.SZ.P113vcREF Lexmark E360dn LL.LBM.P424 Lexmark E360d LL.LBL.P424 Lexmark E260 LL.LBL.P424 Lexmark C935dn LC.JO.P051 Lexmark C920 LS.TA.P127 Lexmark C78x LC.IO.P165a Lexmark C77x LC.CM.P027b Lexmark C73x LR.SK.P224a Lexmark C546 LU.AS.P424 Lexmark C544 LL.AS.P424 Lexmark C543 LL.AS.P424 Lexmark C540 LL.AS.P424 Lexmark C53x LS.SW.P026avc Lexmark C52x LS.FA.P129
Not Vulnerable:	Lexmark X94x LC.BR.P051HDs1 Lexmark X94x LC.BR.P051HDs Lexmark X86x LP.LP.P311h Lexmark X86x LP.LP.P311e Lexmark X85x LC4.BE.P457S1 Lexmark X85x LC4.BE.P457S Lexmark X782e LC2.TO.P305cS1 Lexmark X782e LC2.TO.P305cS Lexmark X772e LC2.TR.P275S1 Lexmark X772e LC2.TR.P275S Lexmark X73x LR.FL.P311h Lexmark X73x LR.FL.P311e Lexmark X65x LR.MN.P311h Lexmark X65x LR.MN.P311e Lexmark X64xef LC2.TI.P305aS1 Lexmark X64xef LC2.TI.P305aS Lexmark X646 LC2.MC.P307aS1 Lexmark X646 LC2.MC.P307aS Lexmark X644 LC2.MC.P307aS1 Lexmark X644 LC2.MC.P307aS Lexmark X642 LC2.MB.P307bS1 Lexmark X642 LC2.MB.P307bS Lexmark X546 LL.EL.P429a Lexmark X544 LL.EL.P429a Lexmark X543 LL.EL.P429a Lexmark X46x LR.BS.P311h Lexmark X46x LR.BS.P311e Lexmark X36x LL.BZ.P429a Lexmark X264 LM1.MT.P214 Lexmark W850 LP.JB.P311h Lexmark W850 LP.JB.P311e Lexmark W840 LS.HA.P236LPCs Lexmark W840 LS.HA.P225S Lexmark W840 LS.HA.P121S1 Lexmark W840 LS.HA.P121S Lexmark W840 LD.HA.FM139s Lexmark W840 LD.HA.BC104s Lexmark T656 LSJ.SJ.P019S Lexmark T654 LR.JP.P311h Lexmark T654 LR.JP.P311e Lexmark T652 LR.JP.P311h Lexmark T652 LR.JP.P311e Lexmark T650 LR.JP.P311h Lexmark T650 LR.JP.P311e Lexmark T64x LS.ST.P240S1 Lexmark T64x LS.ST.P240S Lexmark T64x LS.ST.P240LPCs Lexmark T64x LD.ST.FM152s Lexmark E462 LR.LBH.P311h Lexmark E462 LR.LBH.P311e Lexmark E460 LR.LBH.P311h Lexmark E460 LR.LBH.P311e Lexmark E450 LM.SZ.P113vcREs1 Lexmark E450 LM.SZ.P113vcREs Lexmark E360dn LL.LBM.P429a Lexmark E360d LL.LBL.P429a Lexmark E260 LL.LBL.P429a Lexmark C935dn LC.JO.P051S1 Lexmark C935dn LC.JO.P051S Lexmark C920 LS.TA.P127S Lexmark C920 LS.TA.P127LPCs Lexmark C920 LS.TA.P127EPs Lexmark C920 LD.TA.FM130s Lexmark C920 LD.TA.BC109s Lexmark C78x LC.IO.P165aS1 Lexmark C78x LC.IO.P165aS Lexmark C77x LC.CM.P027bS1 Lexmark C77x LC.CM.P027bS Lexmark C77x LC.CM.P027bLPCs Lexmark C73x LR.SK.P311h Lexmark C73x LR.SK.P311e Lexmark C546 LU.AS.P429a Lexmark C544 LL.AS.P429a Lexmark C543 LL.AS.P429a Lexmark C540 LL.AS.P429a Lexmark C53x LS.SW.P027LPCs Lexmark C53x LS.SW.P026avcS1 Lexmark C53x LS.SW.P026avcS Lexmark C52x LS.FA.P129S1 Lexmark C52x LS.FA.P129S Lexmark C52x LS.FA.P129LPCs Lexmark C52x LD.FA.FM131s

Multiple Lexmark Laser Printers PJL Processing Remote Stack Buffer Overflow Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/38901.pl

Multiple Lexmark Laser Printers PJL Processing Remote Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.