Canon Small Office Multifunction Printers and Laser Printers Buffer Overflow Vulnerability Allowing Denial-of-Service or Arbitrary Code Execution

A buffer overflow vulnerability has been identified in the XPS data font processing of certain Canon Small Office Multifunction Printers and Laser Printers. This vulnerability affects models sold in Japan, the US, and Europe, all running firmware through version 05.04. An attacker on the same network segment could exploit this vulnerability to cause the printer to become unresponsive or to execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to a denial-of-service condition, causing the printer to become unresponsive, or allow for arbitrary code execution on the affected device.

Remediation

Users are advised to update their printers to the latest firmware version. Instructions for downloading the firmware update are available on the Canon Support website. Additionally, it is recommended to connect the printer to a secure private network using a firewall or router, and to avoid direct internet connections.