Summary
Florian Weimer of the Red Hat Product Security Team discovered multiple vulnerabilities in the pdftoopvp CUPS filter, which could result in the execution of aribitrary code if a malformed PDF file is processed.
Solution
For the oldstable distribution (squeeze), these problems have been fixed in version 1.4.4-7+squeeze4.
For the stable distribution (wheezy) and the unstable distribution (sid) the filter is now part of the cups-filters source package.
We recommend that you upgrade your cups packages.
Insight
The Common UNIX Printing System (or CUPS(tm)) is a printing system and general replacement for lpd and the like. It supports the Internet Printing Protocol (IPP), and has its own filtering driver model for handling various document types.
Affected
cups on Debian Linux
Detection
This check tests the installed software version using the apt package manager.
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2013-6474, CVE-2013-6475, CVE-2013-6476 -
CVSS Base Score: 6.8
AV:N/AC:M/Au:N/C:P/I:P/A:P
Related Vulnerabilities