FAQ
How could an attacker exploit this vulnerability? An authenticated attacker with normal privileges could send a modified XPS file to a shared printer, which can result in a remote code execution.
MSRC compact vulnerability detail
CVE-2023-24907 · Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
No description was published by MSRC.
Signals
Microsoft PostScript Printer Driver
Remote Code Execution
Exploited: No
Publicly disclosed: No
Exploitability: Exploitation Less Likely
CWE
Patch Diff
Loading module diff metadata...
Resolved binary override
Use this when the MSRC module name cannot be mapped automatically or the resolved binary looks wrong.
Description
No description was published by MSRC.
FAQ / Articles