JVNDB-2024-000117

Stack-based buffer overflow vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor

Web Image Monitor provided by Ricoh Company, Ltd. is an web server included and runs in laser printers and MFPs (multifunction printers).
Web Image Monitor contains a stack-based buffer overflow vulnerability (CWE-121) due to inappropriate parsing process of HTTP request.

Zhihong Tian, Hui Lu, Guocheng Wu, and Xingchi Chen of the Cyberspace Advanced Technology Institute of Guangzhou University reported this vulnerability to Ricoh Company, Ltd. directly and coordinated.
After the coordination, Ricoh Company, Ltd. reported this case to IPA under Information Security Early Warning Partnership, and JPCERT/CC coordinated with Ricoh Company, Ltd. for JVN publication.

Ricoh Co., Ltd

• Web Image Monitor (Specific products and versions which implement Web Image Monitor)

As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed below.

• Ricoh Company, Ltd.
• KONICA MINOLTA JAPAN, INC. (in Japanese)

Receiving a specially crafted request created and sent by an attacker may lead to arbitrary code execution and/or a denial-of-service (DoS) condition.

[Update Web Image Monitor]
Update Web Image Monitor to the latest version according to the information provided by the respective vendors.

KONICA MINOLTA JAPAN, INC.

• KONICA MINOLTA JAPAN, INC. : KONICA MINOLTA JAPAN, INC. website (in Japanese)

Ricoh Co., Ltd

• RICOH COMPANY, LTD. : Specific Ricoh MFP and Printer Products - Buffer overflow vulnerability (CVE-2024-47939)

1. Buffer Errors(CWE-119) [IPA Evaluation]

1. CVE-2024-47939

1. JVN : JVN#87770340

• [2024/10/31]
    Web page was published
• [2025/03/25]
    CVSS Severity was modified
• [2025/05/19]
    Title was modified
    Overview was modified
    Affected Products : Content was added
    Solution was modified
    Vendor Information : Content was added