CVE-2006-1137

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-10 · updated 2026-06-16

Description

Multiple unspecified vulnerabilities in Xerox CopyCentre and Xerox WorkCentre Pro, running software 1.001.02.073 or earlier, or 1.001.02.074 before 1.001.02.715, allow remote attackers to cause an unspecified denial of service via a crafted PostScript file that will (1) "navigate through the directory" or (2) a "file sent to expose TCP/IP ports".

Affected products

Xerox Copycentre C65 Firmware: through 1.001.02.073; from 1.001.02.074 before 1.001.02.715 — fixed in 1.001.02.715
Xerox Copycentre C75 Firmware: through 1.001.02.073; from 1.001.02.074 before 1.001.02.715 — fixed in 1.001.02.715
Xerox Copycentre C90 Firmware: through 1.001.02.073; from 1.001.02.074 before 1.001.02.715 — fixed in 1.001.02.715
Xerox Workcentre Pro 65 Firmware: through 1.001.02.073; from 1.001.02.074 before 1.001.02.715 — fixed in 1.001.02.715
Xerox Workcentre Pro 75 Firmware: through 1.001.02.073; from 1.001.02.074 before 1.001.02.715 — fixed in 1.001.02.715
Xerox Workcentre Pro 90 Firmware: through 1.001.02.073; from 1.001.02.074 before 1.001.02.715 — fixed in 1.001.02.715

How to fix

Upgrade to a fixed version: Xerox Copycentre C65 Firmware 1.001.02.715; Xerox Copycentre C75 Firmware 1.001.02.715; Xerox Copycentre C90 Firmware 1.001.02.715; Xerox Workcentre Pro 65 Firmware 1.001.02.715; Xerox Workcentre Pro 75 Firmware 1.001.02.715; Xerox Workcentre Pro 90 Firmware 1.001.02.715. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2006-1137 or the next vulnerability affects your stack