Openprinting · Cups-Filters · CVE-2015-8327
**Name of the Vulnerable Software and Affected Versions**
cups-filters versions 1.0.42 through 1.2.0
Foomatic versions 4.0.x
**Description**
The issue is related to an incomplete blacklist vulnerability in the util.c component of foomatic-rip, which is part of the cups-filters package and the Foomatic operating system. This vulnerability can be exploited by a remote attacker to execute arbitrary commands by using ` (backtick) characters in a print job.
**Recommendations**
For cups-filters versions 1.0.42 through 1.2.0, update to version 1.2.0 or later to resolve the issue.
For Foomatic versions 4.0.x, consider disabling the foomatic-rip component until a patch is available.
As a temporary workaround, restrict the use of the ` (backtick) character in print jobs to minimize the risk of exploitation.