Design/Logic Flaw

cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses...

Out-of-bounds

The processbrowsedata function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted packet data...

UBUNTU-CVE-2014-4337

The processbrowsedata function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted packet data...

UBUNTU-CVE-2014-4338

cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses...

CVE-2014-4337

The processbrowsedata function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted packet data...

CVE-2014-4338

cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses...

CVE-2014-4336

The generatelocalqueue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...

CVE-2014-4337

The processbrowsedata function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted packet data...

CVE-2014-4336

CVE-2014-4336 affects cups-filters (cups-browsed) where the generate_local_queue function in utils/cups-browsed.c allowed remote IPP printers to trigger shell commands via metacharacters in the host name. The issue arises from an incomplete fix for CVE-2014-2707 and is present in cups-filters bef...

CVE-2014-4337

The CVE-2014-4337 issue affects cups-filters (cups-browsed) prior to 1.0.53. A crafted browse packet can trigger an out-of-bounds read in process_browse_data(), leading to a denial of service via application crash. Affected component is cups-browsed in the cups-filters stack; impact is a partial ...

CVE-2014-4336

The generatelocalqueue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707...

CVE-2014-4337

The processbrowsedata function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted packet data...

CVE-2014-4338

cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in opportunistic circumstances by leveraging a malformed cups-browsed.conf BrowseAllow directive that is interpreted as granting browse access to all IP addresses...

CVE-2014-4338

CVE-2014-4338 affects cups-filters (cups-browsed) prior to 1.0.53. A malformed BrowseAllow directive in cups-browsed.conf can be interpreted as granting browse access to all IP addresses, bypassing intended access restrictions in opportunistic circumstances. Public references indicate the issue i...

MGASA-2014-0267 Updated cups-filter packages fix security vulnerabilities

In cups-filters before 1.0.53, out-of-bounds accesses in the processbrowsedata function when reading the packet variable could leading to a crash, thus resulting in a denial of service CVE-2014-4337. In cups-filters before 1.0.53, if there was only a single BrowseAllow line in cups-browsed.conf a...

Updated cups-filter packages fix security vulnerabilities

In cups-filters before 1.0.53, out-of-bounds accesses in the processbrowsedata function when reading the packet variable could leading to a crash, thus resulting in a denial of service CVE-2014-4337. In cups-filters before 1.0.53, if there was only a single BrowseAllow line in cups-browsed.conf a...

Apple CUPS Web Interface URL Handling Cross-Site Scripting (CVE-2014-2856)

A Cross-Site Scripting vulnerability exists in the Apple CUPS Web Interface. The vulnerability is due to insufficient input validation while handling HTTP requests. A remote attacker can exploit this vulnerability by enticing a user to click on a link containing script code in the URL...

GLSA-201406-16 : cups-filters: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-16 cups-filters: Multiple vulnerabilities Multiple vulnerabilities have been discovered in cups-filters. Please review the CVE identifiers referenced below for more details about the vulnerabilities. Impact : A remote...

Fedora Update for cups-filters FEDORA-2014-5759

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

cups-filters: Multiple vulnerabilities

Background cups-filters is an OpenPrinting CUPS Filters. Description Multiple vulnerabilities have been discovered in cups-filters. Please review the CVE identifiers referenced below for more details about the vulnerabilities. Impact A remote attackers could possibly execute arbitrary code...