CVE-2013-6473

Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large 1 page or 2 line in a URF file...

CVE-2013-6474

CVE-2013-6474 is a heap-based buffer overflow in the pdftoopvp filter within CUPS/cups-filters that allows remote code execution via a crafted PDF. Affected: cups-filters (and CUPS components) prior to version 1.0.47. Impact: arbitrary code execution with lp user privileges as described in the CV...

CVE-2013-6473

CVE-2013-6473 and related CVEs in cups-filters (URF/PDFl) were due to heap-based/buffer handling flaws in the urftopdf and pdftoopvp filters, potentially allowing remote code execution. Affected versions include cups-filters up to 1.0.47 (and prior to 1.0.53 in later advisories). Open-source advi...

CVE-2013-6474

Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2013-6476

CVE-2013-6476 affects cups-filters (pdftoopvp filter) and its OPVPWrapper.cxx path handling. The root cause is that the pdftoopvp filter did not restrict driver directories, allowing a local attacker to place a Trojan horse driver in the same directory as the PDF to gain privileges. The vulnerabi...

CVE-2013-6475

Multiple integer overflows in 1 OPVPOutputDev.cxx and 2 oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow...

CVE-2013-6476

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file...

CVE-2013-6475

CVE-2013-6475 affects cups-filters (pdftoopvp filter). The connected advisories describe memory handling vulnerabilities in cups-filters that could allow a remote attacker to execute arbitrary code via crafted input, due to issues in the pdftoopvp filter (and related filters like urftopdf). Impac...

CVE-2013-6475

Multiple integer overflows in 1 OPVPOutputDev.cxx and 2 oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow...

CVE-2013-6473

Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large 1 page or 2 line in a URF file...

Debian DSA-2876-1 : cups - security update

Florian Weimer of the Red Hat Product Security Team discovered multiple vulnerabilities in the pdftoopvp CUPS filter, which could result in the execution of aribitrary code if a malformed PDF file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

cups-filters 'OPVPWrapper::loadDriver()'函数本地任意命令执行漏洞

Bugtraq ID:66158 CVE ID:CVE-2013-6476 CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 cups-filters 'OPVPWrapper::loadDriver'函数不正确过滤用户提交的输入，允许本地攻击者利用漏洞以'lp'上下文执行任意命令。 0 cups-filters 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：...

Debian DSA-2875-1 : cups-filters - security update

Florian Weimer of the Red Hat Product Security Team discovered multiple vulnerabilities in the pdftoopvp CUPS filter, which could result in the execution of aribitrary code if a malformed PDF file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

Ubuntu 10.04 LTS : cups vulnerabilities (USN-2144-1)

Florian Weimer discovered that the pdftoopvp filter bundled in the CUPS package incorrectly handled memory. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. CVE-2013-6474, CVE-2013-6475 Florian Weimer discovered that the pdftoopvp filter...

cups multiple security vulnerabilities

Memory corruptions, code execution in urftopdf, pdftoopvp...

Ubuntu 12.04 LTS / 12.10 / 13.10 : cups-filters vulnerabilities (USN-2143-1)

Florian Weimer discovered that cups-filters incorrectly handled memory in the urftopdf filter. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. This issue only affected Ubuntu 13.10. CVE-2013-6473 Florian Weimer discovered that cups-filters...

[SECURITY] [DSA 2876-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2876-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 12, 2014 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2875-1] cups-filters security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2875-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 12, 2014 http://www.debian.org/security/faq -...

USN-2144-1: CUPS vulnerabilities

Florian Weimer discovered that the pdftoopvp filter bundled in the CUPS package incorrectly handled memory. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. CVE-2013-6474, CVE-2013-6475 Florian Weimer discovered that the pdftoopvp filter...

USN-2143-1: cups-filters vulnerabilities

Florian Weimer discovered that cups-filters incorrectly handled memory in the urftopdf filter. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. This issue only affected Ubuntu 13.10. CVE-2013-6473 Florian Weimer discovered that cups-filters...