CVE-2023-24868
Published: 14 March 2023
Summary
CVE-2023-24868 is a high-severity Heap-based Buffer Overflow (CWE-122) vulnerability in Microsoft Windows Server 2012. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 5.7% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability affects the corresponding printer drivers in Microsoft Windows. The flaw is tracked under CVE-2023-24868 with a CVSS 3.1 base score of 8.8 and is associated with CWE-122. It permits remote code execution when the vulnerable drivers process specially crafted input.
An attacker with low privileges can exploit the issue over a network without user interaction. Successful exploitation grants full confidentiality, integrity, and availability impact on the affected system, allowing arbitrary code execution in the context of the driver process.
The referenced Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24868 supplies official patch information and mitigation guidance for the vulnerability. The associated EPSS score has remained flat at 0.1322 with no material increase observed after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-28858
Vulnerability details
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.