CVE-2006-1137
Medium
Description
Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript file that will (1) "navigate through the directory" or (2) a "file sent to expose TCP/IP ports".
SeverityMedium
CVSS5.0
Exploit probability—
ProductXerox Copycentre C65 Firmware
PublishedMar 10, 2006
First seenMar 10, 2006
How to fix
Update
- xerox copycentre_c65_firmware1.001.02.715 or later
- xerox copycentre_c75_firmware1.001.02.715 or later
- xerox copycentre_c90_firmware1.001.02.715 or later
- xerox workcentre_pro_65_firmware1.001.02.715 or later
- xerox workcentre_pro_75_firmware1.001.02.715 or later
- xerox workcentre_pro_90_firmware1.001.02.715 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xerox copycentre_c65_firmware | v ≤ 1.001.02.073, 1.001.02.074 ≤ v < 1.001.02.715 | 1.001.02.715 |
| xerox copycentre_c75_firmware | v ≤ 1.001.02.073, 1.001.02.074 ≤ v < 1.001.02.715 | 1.001.02.715 |
| xerox copycentre_c90_firmware | v ≤ 1.001.02.073, 1.001.02.074 ≤ v < 1.001.02.715 | 1.001.02.715 |
| xerox workcentre_pro_65_firmware | v ≤ 1.001.02.073, 1.001.02.074 ≤ v < 1.001.02.715 | 1.001.02.715 |
| xerox workcentre_pro_75_firmware | v ≤ 1.001.02.073, 1.001.02.074 ≤ v < 1.001.02.715 | 1.001.02.715 |
| xerox workcentre_pro_90_firmware | v ≤ 1.001.02.073, 1.001.02.074 ≤ v < 1.001.02.715 | 1.001.02.715 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.