|
[Japanese]
|
JVNDB-2025-002790
|
Out-of-bounds Write vulnerabilities in Canon Printer Drivers for Production Printers, Office/Small Office Multifunction Printers and Laser Printers
|
|
Out-of-bounds Write vulnerabilities were found in Canon printer drivers for Production Printers, Office/Small Office Multifunction Printers and Laser Printers.
* Out-of-bounds Write vulnerability on curve segmentation (CWE-787) - CVE-2025-0234
* Out-of-bounds Write vulnerability on image rendering (CWE-787) - CVE-2025-0235
* Out-of-bounds Write vulnerability on slope processing during curve rendering
(CWE-787) - CVE-2025-0236
* Out-of-bounds Write vulnerability on EMF records processing (CWE-787) - CVE-2025-1268
Canon Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. JPCERT/CC and Canon Inc. coordinated under the Information Security Early Warning Partnership.
|
|
CVSS V3 Severity:
Base Metrics 9.4 (Critical) [Other]
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Confidentiality Impact: High
- Integrity Impact: High
- Availability Impact: Low
The above CVSS base scores have been assigned for CVE-2025-1268
|
CVSS V3 Severity:
Base Metrics:5.3 (Medium) [Other]
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Low
The above CVSS base scores have been assigned for CVE-2025-0234
|
CVSS V3 Severity:
Base Metrics:5.3 (Medium) [Other]
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Low
The above CVSS base scores have been assigned for CVE-2025-0235
|
CVSS V3 Severity:
Base Metrics:5.3 (Medium) [Other]
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Scope: Unchanged
- Confidentiality Impact: None
- Integrity Impact: None
- Availability Impact: Low
The above CVSS base scores have been assigned for CVE-2025-0236
|
|
For details on the affected products and versions, see the information provided by the vendor.
|
Canon
|
|
|
* Printing a crafted XPS data may cause Denial-of-Service (DoS) condition (CVE-2025-0234, CVE-2025-0235, CVE-2025-0236)
* Passing some invalid values to the affected printer driver may cause Denial-of-Service (DoS) condition; and with some additional condition met, arbitrary code may be executed (CVE-2025-1268)
|
|
[Update the Software or Apply the Workarounds]
For CVE-2025-1268, the developer provides the fixed version.
For CVE-2025-0234, CVE-2025-0235 and CVE-2025-0236, the developer recommends to apply the workarounds.
See the information provided by the developer.
|
|
Canon
|
|
- Out-of-bounds Write(CWE-787) [Other]
|
|
- CVE-2025-0234
- CVE-2025-0235
- CVE-2025-0236
- CVE-2025-1268
|
|
- JVN : JVNVU#93701955
|
|
- [2025/04/02]
Web page was published
|
