CVE-2024-11347

{"id": "CVE-2024-11347", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "7bc73191-a2b6-4c63-9918-753964601853", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}]}, "published": "2025-02-13T19:15:13.537", "references": [{"url": "https://www.lexmark.com/en_us/solutions/security/lexmark-security-advisories.html", "source": "7bc73191-a2b6-4c63-9918-753964601853"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "7bc73191-a2b6-4c63-9918-753964601853", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "Integer Overflow or Wraparound vulnerability in Lexmark International CX, XC, CS, et. Al. (Postscript interpreter modules) allows Forced Integer Overflow.The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user."}, {"lang": "es", "value": "La vulnerabilidad de desbordamiento de enteros o envolvente en Lexmark International CX, XC, CS, et. Al. (m\u00f3dulos de interpretaci\u00f3n Postscript) permite un desbordamiento de enteros forzado. Un atacante puede aprovechar la vulnerabilidad para ejecutar c\u00f3digo arbitrario como un usuario sin privilegios."}], "lastModified": "2025-02-13T19:15:13.537", "sourceIdentifier": "7bc73191-a2b6-4c63-9918-753964601853"}