CVE-2023-24872

Опубликовано: 03 сент. 2023

Источник: msrc

CVSS3: 8.8

EPSS Низкий

Описание

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

How could an attacker exploit this vulnerability?

An authenticated attacker with normal privileges could send a modified XPS file to a shared printer, which can result in a remote code execution.

Продукт	Статья	Обновление
Windows Server 2012	5023756 5023752	Monthly Rollup Security Only
Windows Server 2012 (Server Core installation)	5023756 5023752	Monthly Rollup Security Only
Windows Server 2012 R2	5023765 5023764	Monthly Rollup Security Only
Windows Server 2012 R2 (Server Core installation)	5023765 5023764	Monthly Rollup Security Only
Windows 10 for 32-bit Systems	5023713	Security Update
Windows 10 for x64-based Systems	5023713	Security Update
Windows Server 2016	5023697	Security Update
Windows 10 Version 1607 for 32-bit Systems	5023697	Security Update
Windows 10 Version 1607 for x64-based Systems	5023697	Security Update
Windows Server 2016 (Server Core installation)	5023697	Security Update

Показывать по

Publicly Disclosed

Exploited

Latest Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 87%

0.03462

Низкий

8.8 High

CVSS3

CVE-2023-24872

CVSS3: 8.8

nvd

больше 2 лет назад

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

GHSA-g43m-56w9-qc5h

CVSS3: 8.8

github

больше 2 лет назад

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

BDU:2023-01319

CVSS3: 8.8

fstec

больше 2 лет назад

Уязвимость драйвера PCL6 Class Printer операционных систем Windows, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 87%

0.03462

Низкий

8.8 High

CVSS3