CVE-2015-3279

CVE-2015-3279 (and CVE-2015-3258) affects cups-filters texttopdf in the texttopdf filter of cups-filters. The vulnerability is a heap-based buffer overflow (and associated integer overflow) triggered by processing a print job with a crafted line size, allowing remote attackers to crash texttopdf ...

CVE-2015-3258

CVE-2015-3258 affects cups-filters' texttopdf component (filter/texttopdf.c). Root cause: a heap-based buffer overflow in WriteProlog when processing a print job with a small line size, allowing a remote attacker to crash texttopdf or possibly execute arbitrary code. Affected product: cups-filter...

CVE-2015-3258

Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a small line size in a print job...

CVE-2015-3279

Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service crash or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow...

[SECURITY] Fedora 22 Update: cups-filters-1.0.71-1.fc22

Contains backends, filters, and other software that was once part of the core CUPS distribution but is no longer maintained by Apple Inc. In addition it contains additional filters developed independently of Apple, especially filters for the PDF-centric printing workflow introduced by OpenPrintin...

Fedora 21 : cups-x2go-3.0.1.3-1.fc21 (2015-10450)

New upstream version 3.0.1.2 : - cups-x2go,.conf: port to File::Temp. Use Text::ParseWords to split up the ps2pdf command line correctly. Don't use system but IPC::Open2::open2. Capture the ps2pdf program's stdout and write it to the temporary file handle 'manually'. Should fix problems reported...

[SECURITY] [DSA 3303-1] cups-filters security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3303-1 [email protected] https://www.debian.org/security/ Alessandro Ghedini July 07, 2015 https://www.debian.org/security/faq -...

cups-filters buffer overflow

texttopdf buffer overflows...

Fedora Update for cups-x2go FEDORA-2015-10450

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 21 Update: cups-x2go-3.0.1.3-1.fc21

X2Go is a server based computing environment with - session resuming - low bandwidth support - session brokerage support - client side mass storage mounting support - audio support - authentication by smartcard and USB stick CUPS backend for printing from X2Go...

cups-filters heap buffer overflow vulnerability

Apple CUPS Common Unix Printing System is an open source printing system for OS X and Unix-like systems from Apple. cups-filters is a package that provides CUPS filters. A heap buffer overflow vulnerability exists in cups-filters. An attacker could exploit this vulnerability to execute arbitrary...

cups-filters 'texttopdf' heap buffer overflow vulnerability

Apple CUPS Common Unix Printing System is an open source printing system for OS X and Unix-like systems from Apple. cups-filters is a package that provides CUPS filters. A remote heap buffer overflow vulnerability exists in cups-filters. Allowing an attacker to execute arbitrary code with the...

MGASA-2015-0270 Updated cups-filters package fixes security vulnerability

A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filters processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of...

Updated cups-filters package fixes security vulnerability

A heap-based buffer overflow was discovered in the way the texttopdf utility of cups-filters processed print jobs with a specially crafted line size. An attacker being able to submit print jobs could exploit this flaw to crash texttopdf or, possibly, execute arbitrary code with the privileges of...

[slackware-security] cups

New cups packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/cups-1.5.4-i486-4slack14.1.txz: Rebuilt. This release fixes a security issue: CWE-911: Improper Update of...

Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : cups (SSA:2015-188-01)

New cups packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2015-188-01. The text itse...

Amazon Linux AMI : cups (ALAS-2015-559)

A string reference count bug was found in cupsd, causing premature freeing of string objects. An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged operations, allowing a replacement configuration file to be uploaded which in turn allows the...

Debian DSA-3303-1 : cups-filters - security update

It was discovered that the texttopdf utility, part of cups-filters, was susceptible to multiple heap-based buffer overflows due to improper handling of print jobs with a specially crafted line size. This could allow remote attackers to crash texttopdf or possibly execute arbitrary code...

Fedora Update for cups-x2go FEDORA-2015-10459

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Medium: cups

Issue Overview: A string reference count bug was found in cupsd, causing premature freeing of string objects. An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged operations, allowing a replacement configuration file to be uploaded which in...