CVE-2006-1137
Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript…
Does this matter?
Lower severity and a low EPSS score (3.94%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript file that will (1) "navigate through the directory" or (2) a "file sent to expose TCP/IP ports".
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 3.94% probability · 90th percentile
- CISA KEV
- Not listed
- Affected
- xerox/copycentre c65 firmware · xerox/copycentre c75 firmware · xerox/copycentre c90 firmware · xerox/workcentre pro 65 firmware · xerox/workcentre pro 75 firmware · xerox/workcentre pro 90 firmware
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/19146Third Party Advisory
- http://securitytracker.com/id?1015738Third Party Advisory, VDB Entry
- http://www.osvdb.org/23725Broken Link
- http://www.osvdb.org/23726Broken Link
- http://www.securityfocus.com/bid/17014Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/0857Permissions Required, Third Party Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdfBroken Link, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25173Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25174Third Party Advisory, VDB Entry
- http://secunia.com/advisories/19146Third Party Advisory
- http://securitytracker.com/id?1015738Third Party Advisory, VDB Entry
- http://www.osvdb.org/23725Broken Link
- http://www.osvdb.org/23726Broken Link
- http://www.securityfocus.com/bid/17014Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/0857Permissions Required, Third Party Advisory
- http://www.xerox.com/downloads/usa/en/c/cert_XRX06_002.pdfBroken Link, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25173Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25174Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.