CERTA-2013-AVI-166
Vulnerability from certfr_avis

De multiples vulnérabilités ont été corrigées dans Xerox FreeFlow Print Server. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Versions antérieures à Xerox FreeFlow Print Server 8.0_SP-3 (82.C5.24.86)

Impacted products
Vendor Product Description
References

Show details on source website


{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cP\u003eVersions ant\u00e9rieures \u00e0 Xerox FreeFlow Print Server 8.0_SP-3  (82.C5.24.86)\u003c/P\u003e",
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-4339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-4339"
    },
    {
      "name": "CVE-2012-5166",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5166"
    },
    {
      "name": "CVE-2012-1973",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1973"
    },
    {
      "name": "CVE-2012-0769",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0769"
    },
    {
      "name": "CVE-2012-3974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3974"
    },
    {
      "name": "CVE-2012-3159",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3159"
    },
    {
      "name": "CVE-2012-3962",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3962"
    },
    {
      "name": "CVE-2012-2983",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2983"
    },
    {
      "name": "CVE-2012-1533",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1533"
    },
    {
      "name": "CVE-2012-1531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1531"
    },
    {
      "name": "CVE-2012-0768",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0768"
    },
    {
      "name": "CVE-2012-3216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3216"
    },
    {
      "name": "CVE-2012-3967",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3967"
    },
    {
      "name": "CVE-2012-3966",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3966"
    },
    {
      "name": "CVE-2012-5081",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5081"
    },
    {
      "name": "CVE-2012-1972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1972"
    },
    {
      "name": "CVE-2012-3976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3976"
    },
    {
      "name": "CVE-2012-1975",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1975"
    },
    {
      "name": "CVE-2012-5083",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5083"
    },
    {
      "name": "CVE-2012-3957",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3957"
    },
    {
      "name": "CVE-2012-2687",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2687"
    },
    {
      "name": "CVE-2012-3970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3970"
    },
    {
      "name": "CVE-2012-3978",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3978"
    },
    {
      "name": "CVE-2012-5077",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5077"
    },
    {
      "name": "CVE-2012-5072",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5072"
    },
    {
      "name": "CVE-2012-0725",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0725"
    },
    {
      "name": "CVE-2012-2982",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2982"
    },
    {
      "name": "CVE-2012-5079",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5079"
    },
    {
      "name": "CVE-2012-5075",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5075"
    },
    {
      "name": "CVE-2012-0569",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0569"
    },
    {
      "name": "CVE-2012-5071",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5071"
    },
    {
      "name": "CVE-2012-5086",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5086"
    },
    {
      "name": "CVE-2006-4514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4514"
    },
    {
      "name": "CVE-2012-3959",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3959"
    },
    {
      "name": "CVE-2012-3980",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3980"
    },
    {
      "name": "CVE-2012-0773",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0773"
    },
    {
      "name": "CVE-2012-1960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1960"
    },
    {
      "name": "CVE-2012-4245",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4245"
    },
    {
      "name": "CVE-2011-3102",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-3102"
    },
    {
      "name": "CVE-2012-1971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1971"
    },
    {
      "name": "CVE-2012-3963",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3963"
    },
    {
      "name": "CVE-2012-0724",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0724"
    },
    {
      "name": "CVE-2012-5073",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5073"
    },
    {
      "name": "CVE-2012-3961",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3961"
    },
    {
      "name": "CVE-2012-3972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3972"
    },
    {
      "name": "CVE-2011-2964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2964"
    },
    {
      "name": "CVE-2012-5084",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5084"
    },
    {
      "name": "CVE-2013-0415",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0415"
    },
    {
      "name": "CVE-2011-2697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2697"
    },
    {
      "name": "CVE-2013-0399",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0399"
    },
    {
      "name": "CVE-2012-0772",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0772"
    },
    {
      "name": "CVE-2012-5089",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5089"
    },
    {
      "name": "CVE-2012-2981",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-2981"
    },
    {
      "name": "CVE-2012-3143",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3143"
    },
    {
      "name": "CVE-2012-3968",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3968"
    },
    {
      "name": "CVE-2012-1974",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1974"
    },
    {
      "name": "CVE-2012-1976",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1976"
    },
    {
      "name": "CVE-2012-0841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0841"
    },
    {
      "name": "CVE-2012-3964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3964"
    },
    {
      "name": "CVE-2012-5069",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5069"
    },
    {
      "name": "CVE-2012-5068",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5068"
    },
    {
      "name": "CVE-2012-4416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-4416"
    },
    {
      "name": "CVE-2012-3960",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3960"
    },
    {
      "name": "CVE-2012-3969",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3969"
    },
    {
      "name": "CVE-2008-6536",
      "url": "https://www.cve.org/CVERecord?id=CVE-2008-6536"
    },
    {
      "name": "CVE-2012-5085",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-5085"
    },
    {
      "name": "CVE-2013-0400",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0400"
    },
    {
      "name": "CVE-2012-1532",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1532"
    },
    {
      "name": "CVE-2012-1970",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-1970"
    },
    {
      "name": "CVE-2012-0883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-0883"
    },
    {
      "name": "CVE-2012-3958",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3958"
    },
    {
      "name": "CVE-2012-3956",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3956"
    },
    {
      "name": "CVE-2013-0407",
      "url": "https://www.cve.org/CVERecord?id=CVE-2013-0407"
    },
    {
      "name": "CVE-2012-3401",
      "url": "https://www.cve.org/CVERecord?id=CVE-2012-3401"
    }
  ],
  "initial_release_date": "2013-03-06T00:00:00",
  "last_revision_date": "2013-03-06T00:00:00",
  "links": [],
  "reference": "CERTA-2013-AVI-166",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2013-03-06T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eXerox FreeFlow Print Server\u003c/span\u003e. Elles permettent \u00e0 un\nattaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans Xerox FreeFlow Print Server",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Xerox du 26 f\u00e9vrier 2013",
      "url": "http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.


Loading…

Loading…