CVE-2017-2806

An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality

Medium · published April 20, 2017

CVSS v3.0
4.3
EPSS
1%
Percentile
59.3
In the wild
Unconfirmed
What it is

An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality. A crafted XLS document can lead to a arbitrary read resulting in memory disclosure. The vulnerability was confirmed on versions 11.3.0.2228 and 11.3.0.2400

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00908 · 59.3th percentile
Published
2017-04-20T18:00Z
EPSS history
Timeline
  • 20 APR 18:00Z
    An exploitable arbitrary read exists in the XLS parsing of the Lexmark Perspective Document Filters conversion functionality
    cvelistv5