Lexmark MarkVision Enterprise CVE-2014-8741 Remote Code Execution Vulnerability
BID:71623
Info
Lexmark MarkVision Enterprise CVE-2014-8741 Remote Code Execution Vulnerability
| Bugtraq ID: | 71623 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-8741 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 09 2014 12:00AM |
| Updated: | Jan 15 2015 12:01AM |
| Credit: | Andrea Micalizzi (rgod) |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Lexmark MarkVision Enterprise CVE-2014-8741 Remote Code Execution Vulnerability
Lexmark MarkVision Enterprise is prone to a remote code-execution vulnerability because it fails to sufficiently sanitize user-supplied input.
Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of affected application. Failed attacks may cause a denial-of-service condition.
Versions prior to Lexmark MarkVision Enterprise 2.1 are vulnerable.
Lexmark MarkVision Enterprise is prone to a remote code-execution vulnerability because it fails to sufficiently sanitize user-supplied input.
Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of affected application. Failed attacks may cause a denial-of-service condition.
Versions prior to Lexmark MarkVision Enterprise 2.1 are vulnerable.
Exploit / POC
Lexmark MarkVision Enterprise CVE-2014-8741 Remote Code Execution Vulnerability
The following metasploit exploit module is available:
The following metasploit exploit module is available:
Solution / Fix
Lexmark MarkVision Enterprise CVE-2014-8741 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Lexmark MarkVision Enterprise CVE-2014-8741 Remote Code Execution Vulnerability
References:
References: