Vincent Untz

**Name of the Vulnerable Software and Affected Versions** cups-pk-helper versions prior to 0.2.3 **Description** The issue allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources due to improper wrapping of the `cupsGetFile` and `cupsPutFile` function calls. This can lead to a breach of confidentiality and integrity of protected information. The exploitation of this issue can be done remotely. **Recommendations** For versions prior to 0.2.3, update to version 0.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to CUPS resources to minimize the risk of exploitation.