PT-2014-1793 · Openprinting+1 · Cups-Filters+1
Florian Weimer
+1
·
Publicado
2014-03-12
·
Atualizado
2024-06-15
·
CVE-2013-6475
CVSS v2.0
8.3
Alta
| Vetor | AV:A/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
cups-filters versions prior to 1.0.53
Description
The issue involves multiple vulnerabilities in the cups-filters package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Specifically, there are multiple integer overflows in the pdftoopvp filter, which can allow remote attackers to execute arbitrary code via a crafted PDF file, triggering a heap-based buffer overflow.
Recommendations
For versions prior to 1.0.53, update to version 1.0.53 or later to resolve the issue.
As a temporary workaround, consider restricting access to the pdftoopvp filter until a patch is available.
Avoid using the cups-filters package with untrusted PDF files until the issue is resolved.
Correção
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Alt Linux
Cups-Filters