CVEvulnerability
CVE-2013-6473
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large (1) page or (2) line in a URF file.
Affected configurations
• canonical ubuntu linux 13.10
• linuxfoundation cups-filters 1.0.25
• linuxfoundation cups-filters 1.0.26
• linuxfoundation cups-filters 1.0.27
• linuxfoundation cups-filters 1.0.28
• linuxfoundation cups-filters 1.0.29
• linuxfoundation cups-filters 1.0.30
• linuxfoundation cups-filters 1.0.31
• linuxfoundation cups-filters 1.0.32
• linuxfoundation cups-filters 1.0.33
• linuxfoundation cups-filters 1.0.34
• linuxfoundation cups-filters 1.0.35
• linuxfoundation cups-filters 1.0.36
• linuxfoundation cups-filters 1.0.37
• linuxfoundation cups-filters 1.0.38
• linuxfoundation cups-filters 1.0.39
• linuxfoundation cups-filters 1.0.40
• linuxfoundation cups-filters 1.0.41
• linuxfoundation cups-filters 1.0.42
• linuxfoundation cups-filters 1.0.43
• linuxfoundation cups-filters 1.0.44
• linuxfoundation cups-filters 1.0.45
• linuxfoundation cups-filters 1.0.46
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7175 Patch
- http://www.securityfocus.com/bid/66601 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-2143-1 www.ubuntu.com
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741333 bugs.debian.org
- https://bugzilla.redhat.com/show_bug.cgi?id=1027547 bugzilla.redhat.com
- http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7175 Patch
- http://www.securityfocus.com/bid/66601 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-2143-1 www.ubuntu.com
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741333 bugs.debian.org
- https://bugzilla.redhat.com/show_bug.cgi?id=1027547 bugzilla.redhat.com