ZDI-24-083: (Pwn2Own) Lexmark CX331adwe PostScript File Parsing Memory Corruption Remote Code Execution Vulnerability | allinfosecnews.com

Jan. 31, 2024, 6 a.m. |

ZDI: Published Advisories www.zerodayinitiative.com

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX331adwe printers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-50736.

arbitrary code attackers authentication code code execution corruption cve cves cvss exploit file lexmark memory memory corruption network parsing postscript printers pwn2own rating remote code remote code execution vulnerability zdi

More from www.zerodayinitiative.com / ZDI: Published Advisories

ZDI-24-416: Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability 1 day, 11 hours ago | www.zerodayinitiative.com

arbitrary code attackers centreon code +12

ZDI-24-407: X.Org Server ProcRenderAddGlyphs Use-After-Free Local Privilege Escalation Vulnerability 4 days, 11 hours ago | www.zerodayinitiative.com

attacker attackers code cve +23

ZDI-24-406: Adobe After Effects AEP File Parsing Use-After-Free Remote Code Execution Vulnerability 4 days, 11 hours ago | www.zerodayinitiative.com

adobe adobe after effects aep after effects +18

ZDI-24-405: Lexmark CX331adwe IPP Server Authorization HTTP Header Heap-Based Buffer Overflow Remote Code Execution Vulnerability 4 days, 11 hours ago | www.zerodayinitiative.com

arbitrary code attackers authentication authorization +20

ZDI-24-415: (Pwn2Own) Oracle VirtualBox E1000 Uninitialized Memory Information Disclosure Vulnerability 4 days, 11 hours ago | www.zerodayinitiative.com

attacker attackers code cves +22

ZDI-24-414: (Pwn2Own) Oracle VirtualBox AHCI Controller Uninitialized Memory Information Disclosure Vulnerability 4 days, 11 hours ago | www.zerodayinitiative.com

attacker attackers code controller +22

ZDI-24-413: (Pwn2Own) Oracle VirtualBox DevVGA Out-Of-Bounds Write Local Privilege Escalation Vulnerability 4 days, 11 hours ago | www.zerodayinitiative.com

attacker attackers code cves +22

ZDI-24-412: (Pwn2Own) Oracle VirtualBox VirtIOCore Buffer Overflow Local Privilege Escalation Vulnerability 4 days, 11 hours ago | www.zerodayinitiative.com

attacker attackers buffer buffer overflow +23

ZDI-24-411: (Pwn2Own) Oracle VirtualBox BusLogic Uninitialized Memory Information Disclosure Vulnerability 4 days, 11 hours ago | www.zerodayinitiative.com

attacker attackers code cves +22

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Threat Analysis Engineer

@ Gen | IND - Tamil Nadu, Chennai

View on infosec-jobs.com

Head of Security

@ Hippocratic AI | Palo Alto

View on infosec-jobs.com

IT Security Vulnerability Management Specialist (15.10)

@ OCT Consulting, LLC | Washington, District of Columbia, United States

View on infosec-jobs.com

Security Engineer - Netskope/Proofpoint

@ Sainsbury's | Coventry, West Midlands, United Kingdom

View on infosec-jobs.com

Journeyman Cybersecurity Analyst

@ ISYS Technologies | Kirtland AFB, NM, United States

View on infosec-jobs.com