CVE-2023-24909 - Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

Back Back to CVE browser

HIGH

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

Published Mar 14, 2023

8.8

HIGH

CVSS 3.1

EPSS 1.29%

Description

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability

Affected products

Vendor Microsoft Product Windows 10 Version 1507 Default
n/a
- Version
  10.0.10240.0
  Status
  affected
  Constraints
  <10.0.10240.19805
Vendor Microsoft Product Windows 10 Version 1607 Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.5786
Vendor Microsoft Product Windows 10 Version 1809 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.17763.4131
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.4131
Vendor Microsoft Product Windows 10 Version 20H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.19042.2728
Vendor Microsoft Product Windows 10 Version 21H2 Default
n/a
- Version
  10.0.19043.0
  Status
  affected
  Constraints
  <10.0.19044.2728
Vendor Microsoft Product Windows 10 Version 22H2 Default
n/a
- Version
  10.0.19045.0
  Status
  affected
  Constraints
  <10.0.19045.2728
Vendor Microsoft Product Windows 11 version 21H2 Default
n/a
- Version
  10.0.0
  Status
  affected
  Constraints
  <10.0.22000.1696
Vendor Microsoft Product Windows 11 version 22H2 Default
n/a
- Version
  10.0.22621.0
  Status
  affected
  Constraints
  <10.0.22621.1413
Vendor Microsoft Product Windows Server 2012 Default
n/a
- Version
  6.2.9200.0
  Status
  affected
  Constraints
  <6.2.9200.24168
Vendor Microsoft Product Windows Server 2012 (Server Core installation) Default
n/a
- Version
  6.2.9200.0
  Status
  affected
  Constraints
  <6.2.9200.24168
Vendor Microsoft Product Windows Server 2012 R2 Default
n/a
- Version
  6.3.9600.0
  Status
  affected
  Constraints
  <6.3.9600.20865
Vendor Microsoft Product Windows Server 2012 R2 (Server Core installation) Default
n/a
- Version
  6.3.9600.0
  Status
  affected
  Constraints
  <6.3.9600.20865
Vendor Microsoft Product Windows Server 2016 Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.5786
Vendor Microsoft Product Windows Server 2016 (Server Core installation) Default
n/a
- Version
  10.0.14393.0
  Status
  affected
  Constraints
  <10.0.14393.5786
Vendor Microsoft Product Windows Server 2019 Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.4131
Vendor Microsoft Product Windows Server 2019 (Server Core installation) Default
n/a
- Version
  10.0.17763.0
  Status
  affected
  Constraints
  <10.0.17763.4131
Vendor Microsoft Product Windows Server 2022 Default
n/a
- Version
  10.0.20348.0
  Status
  affected
  Constraints
  <10.0.20348.1607

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows 10 Version 1507

n/a

Version	Status	Constraints
10.0.10240.0	affected	<10.0.10240.19805

Microsoft

Windows 10 Version 1607

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.5786

Microsoft

Windows 10 Version 1809

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.17763.4131
10.0.17763.0	affected	<10.0.17763.4131

Microsoft

Windows 10 Version 20H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.19042.2728

Microsoft

Windows 10 Version 21H2

n/a

Version	Status	Constraints
10.0.19043.0	affected	<10.0.19044.2728

Microsoft

Windows 10 Version 22H2

n/a

Version	Status	Constraints
10.0.19045.0	affected	<10.0.19045.2728

Microsoft

Windows 11 version 21H2

n/a

Version	Status	Constraints
10.0.0	affected	<10.0.22000.1696

Microsoft

Windows 11 version 22H2

n/a

Version	Status	Constraints
10.0.22621.0	affected	<10.0.22621.1413

Microsoft

Windows Server 2012

n/a

Version	Status	Constraints
6.2.9200.0	affected	<6.2.9200.24168

Microsoft

Windows Server 2012 (Server Core installation)

n/a

Version	Status	Constraints
6.2.9200.0	affected	<6.2.9200.24168

Microsoft

Windows Server 2012 R2

n/a

Version	Status	Constraints
6.3.9600.0	affected	<6.3.9600.20865

Microsoft

Windows Server 2012 R2 (Server Core installation)

n/a

Version	Status	Constraints
6.3.9600.0	affected	<6.3.9600.20865

Microsoft

Windows Server 2016

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.5786

Microsoft

Windows Server 2016 (Server Core installation)

n/a

Version	Status	Constraints
10.0.14393.0	affected	<10.0.14393.5786

Microsoft

Windows Server 2019

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.4131

Microsoft

Windows Server 2019 (Server Core installation)

n/a

Version	Status	Constraints
10.0.17763.0	affected	<10.0.17763.4131

Microsoft

Windows Server 2022

n/a

Version	Status	Constraints
10.0.20348.0	affected	<10.0.20348.1607

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-190

Integer Overflow

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-28897
Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24909
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-28897		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24909		vendor-advisoryPatchVendor Advisory