Lucene search

K
cve[email protected]CVE-2013-6475
HistoryMar 14, 2014 - 3:55 p.m.

CVE-2013-6475

2014-03-1415:55:00
CWE-189
web.nvd.nist.gov
41
cve-2013-6475
integer overflows
pdftoopvp filter
remote code execution
pdf
buffer overflow
cups
cups-filters
nvd

7.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.061 Low

EPSS

Percentile

93.5%

Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow.

7.3 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.061 Low

EPSS

Percentile

93.5%