Vulnerability Spotlight: Information Disclosure Vulnerability in Lexmark Perceptive Document Filters
Summary: Cisco Talos disclosed TALOS-2017-0302, an information disclosure vulnerability in the Lexmark Perceptive Document Filters library, affecting versions 11.3.0.2228 and 11.3.0.2400. The flaw lies in the processing of IHlink records of Office Art objects embedded in XLS files, where the absence of a value sanitization check for variable length fields lets a specially crafted XLS file cause an arbitrary memory read.
Key Takeaway: The library is embedded in third-party products across eDiscovery, DLP, big data and content management, so organizations may be exposed without knowing it; Lexmark released Perceptive Document Filters 11.4.0.2480 to address the issue.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026