cups-filters 'pdftoopvp'过滤器远程堆缓冲区溢出漏洞

Bugtraq ID:66163 CVE ID:CVE-2013-6474 CUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 cups-filters 'pdftoopvp'过滤器存在远程堆缓冲区溢出，允许攻击者利用漏洞提交特殊请求使服务程序崩溃或可执行任意代码。 0 cups-filters 用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞：...

CVE-2013-6475: Undefined Security Weakness

Multiple integer overflows in 1 OPVPOutputDev.cxx and 2 oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow...

CVE-2013-6474: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file...

CVE-2013-6476: Undefined Security Weakness

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file...

Debian DSA-2875-1 : cups-filters - security update

Florian Weimer of the Red Hat Product Security Team discovered multiple vulnerabilities in the pdftoopvp CUPS filter, which could result in the execution of aribitrary code if a malformed PDF file is processed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

[USN-2143-1] cups-filters vulnerabilities

========================================================================== Ubuntu Security Notice USN-2143-1 March 12, 2014 cups-filters vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives...

Ubuntu 10.04 LTS : cups vulnerabilities (USN-2144-1)

Florian Weimer discovered that the pdftoopvp filter bundled in the CUPS package incorrectly handled memory. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. CVE-2013-6474, CVE-2013-6475 Florian Weimer discovered that the pdftoopvp filter...

Ubuntu 12.04 LTS / 12.10 / 13.10 : cups-filters vulnerabilities (USN-2143-1)

Florian Weimer discovered that cups-filters incorrectly handled memory in the urftopdf filter. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. This issue only affected Ubuntu 13.10. CVE-2013-6473 Florian Weimer discovered that cups-filters...

cups multiple security vulnerabilities

Memory corruptions, code execution in urftopdf, pdftoopvp...

[SECURITY] [DSA 2876-1] cups security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2876-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 12, 2014 http://www.debian.org/security/faq -...

USN-2144-1: CUPS vulnerabilities

Florian Weimer discovered that the pdftoopvp filter bundled in the CUPS package incorrectly handled memory. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. CVE-2013-6474, CVE-2013-6475 Florian Weimer discovered that the pdftoopvp filter...

USN-2143-1: cups-filters vulnerabilities

Florian Weimer discovered that cups-filters incorrectly handled memory in the urftopdf filter. An attacker could possibly use this issue to execute arbitrary code with the privileges of the lp user. This issue only affected Ubuntu 13.10. CVE-2013-6473 Florian Weimer discovered that cups-filters...

Debian Security Advisory DSA 2876-1 (cups - security update)

Florian Weimer of the Red Hat Product Security Team discovered multiple vulnerabilities in the pdftoopvp CUPS filter, which could result in the execution of aribitrary code if a malformed PDF file is processed. OpenVAS Vulnerability Test $Id: deb2876.nasl 6715 2017-07-13 09:57:40Z teissa $...

PT-2014-1793

Name of the Vulnerable Software and Affected Versions cups-filters versions prior to 1.0.53 Description The issue involves multiple vulnerabilities in the cups-filters package that can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities...

PT-2014-1794

Name of the Vulnerable Software and Affected Versions cups-filters versions prior to 1.0.47 cups-filters versions prior to 1.0.53 Description The issue allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file, specifically through the...

PT-2014-1792

Name of the Vulnerable Software and Affected Versions cups-filters versions prior to 1.0.53 Description The issue concerns multiple vulnerabilities in the cups-filters package that can lead to breaches in confidentiality, integrity, and availability of protected information. These vulnerabilities...

Debian: Security Advisory (DSA-2876-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2013-6475

Multiple integer overflows in 1 OPVPOutputDev.cxx and 2 oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow...

CVE-2013-6474

Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file...