Vulnerability Spotlight: Multiple Remote Code Execution Vulnerabilities Within Lexmark Perceptive Document Filters.
Summary: Cisco Talos released three vulnerabilities in the Lexmark Perceptive Document Filters library - TALOS-2016-0172, TALOS-2016-0173 and TALOS-2016-0183 - that allow remote code execution through specifically crafted XLS, bzip2 and Compound Binary File Format (MS-CFB) files. The flaws are out-of-bounds write and heap overflow issues in the library's parsing and conversion engine, which is used across eDiscovery, DLP, big data and content management services, and can be delivered via phishing as an attachment or a download URL.
What you should know: The vulnerable library sits inside the DLP and eDiscovery tools organizations use to inspect untrusted files, so a crafted XLS or bzip2 attachment can hand an adversary remote code execution and potentially full control of the resource doing the scanning.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026