Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 508
Alerts This Week
Warning Icon 1 508

Debian: DSA-2876-1 Critical: CUPS Code Execution from Malformed PDFs

debian
Calendar Grey March 12, 2014
Scroller Debian
Critical flaws identified in CUPS filtering system may allow arbitrary code execution through improperly formatted PDF files. Update recommended.
Florian Weimer of the Red Hat Product Security Team discovered multiple vulnerabilities in the pdftoopvp CUPS filter, which could result in the execution of aribitrary code if a ma...
Topics%20covered

Topics Covered

security advisory security issue code execution debian cups pdf

Summary

Florian Weimer of the Red Hat Product Security Team discovered multiple
vulnerabilities in the pdftoopvp CUPS filter, which could result in the
execution of aribitrary code if a malformed PDF file is processed.

For the oldstable distribution (squeeze), these problems have been fixed in
version 1.4.4-7+squeeze4.

For the stable distribution (wheezy) and the unstable distribution (sid)
the filter is now part of the cups-filters source package.

We recommend that you upgrade your cups packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/



Severity
critical
Lowest
Low
Medium
High
Critical

Package: cups
CVE ID: CVE-2013-6474 CVE-2013-6475 CVE-2013-6476

Topics%20covered

Topics Covered

security advisory security issue code execution debian cups pdf

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.