CVE-2016-5646

An exploitable heap overflow vulnerability exists in the Compound Binary File Format (CBFF) parser functionality of Lexmark Perceptive Document Filters library. A specially crafted CBFF file can cause a code execution. An attacker can send a malformed file to trigger this vulnerability.

Score

CVSS 3.0 7.8 High

Status

Modified - cret@cert.org

Published

2017-01-06

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Perceptive Document Filters (Lexmark)

References

• http://www.talosintelligence.com/reports/TALOS-2016-0185/