All the vulnerabilites related to Brother Industries, Ltd. - iPrint&Scan Desktop for Windows
cve-2023-51654
Vulnerability from cvelistv5
Published
2023-12-26 05:33
Modified
2024-08-02 22:40
Severity ?
EPSS score ?
Summary
Improper link resolution before file access ('Link Following') issue exists in iPrint&Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service (DoS) condition on the PC.
References
▼ | URL | Tags |
---|---|---|
https://jvn.jp/en/vu/JVNVU97943829/ |
Impacted products
▼ | Vendor | Product |
---|---|---|
Brother Industries, Ltd. | iPrint&Scan Desktop for Windows |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-02T22:40:33.847Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "x_transferred" ], "url": "https://jvn.jp/en/vu/JVNVU97943829/" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "product": "iPrint\u0026Scan Desktop for Windows", "vendor": "Brother Industries, Ltd.", "versions": [ { "status": "affected", "version": "11.0.0 and earlier" } ] } ], "descriptions": [ { "lang": "en", "value": "Improper link resolution before file access (\u0027Link Following\u0027) issue exists in iPrint\u0026Scan Desktop for Windows versions 11.0.0 and earlier. A symlink attack by a malicious user may cause a Denial-of-service (DoS) condition on the PC." } ], "problemTypes": [ { "descriptions": [ { "description": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)", "lang": "en", "type": "text" } ] } ], "providerMetadata": { "dateUpdated": "2023-12-26T05:33:57.383Z", "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "shortName": "jpcert" }, "references": [ { "url": "https://jvn.jp/en/vu/JVNVU97943829/" } ] } }, "cveMetadata": { "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce", "assignerShortName": "jpcert", "cveId": "CVE-2023-51654", "datePublished": "2023-12-26T05:33:57.383Z", "dateReserved": "2023-12-20T23:27:53.139Z", "dateUpdated": "2024-08-02T22:40:33.847Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }