Solution
Please Install the Updated Packages.
Insight
The Common UNIX Printing System (CUPS) provides a portable printing layer for UNIX operating systems. The CUPS "
pdftops"
filter converts Portable
Document Format (PDF) files to PostScript.
Multiple flaws were discovered in the CUPS "
pdftops"
filter. An attacker
could create a malicious PDF file that, when printed, would cause " pdftops"
to crash or, potentially, execute arbitrary code as the " lp"
user.
(CVE-2010-3702, CVE-2009-3609)
Users of cups are advised to upgrade to these updated packages, which contain backported patches to correct these issues. After installing this update, the cupsd daemon will be restarted automatically.
Affected
cups on CentOS 4
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2009-3609, CVE-2010-3702 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities