Canon Multifunction and Laser Printers Buffer Overflow Vulnerability Allowing Arbitrary Code Execution or Denial-of-Service

A buffer overflow vulnerability has been identified in the TIFF data EXIF tag processing of certain Canon Small Office Multifunction Printers and Laser Printers. This vulnerability affects specific models sold in Japan, the US, and Europe, all running firmware through version 05.04. An attacker on the same network segment could exploit this vulnerability to cause the printer to become unresponsive or to execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution or a denial-of-service condition, causing the printer to become unresponsive.

Remediation

Users are advised to update their printers to the latest firmware version. Instructions for downloading the firmware are available on the Canon support website. Additionally, it is recommended to use a firewall or router to create a secure private network for internet access, avoiding direct connections to the internet.