CVEvulnerability
CVE-2014-2707
8.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-04-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts generated for queues."
Affected configurations
• linuxfoundation cups-filters 1.0.41
• linuxfoundation cups-filters 1.0.42
• linuxfoundation cups-filters 1.0.43
• linuxfoundation cups-filters 1.0.44
• linuxfoundation cups-filters 1.0.45
• linuxfoundation cups-filters 1.0.46
• linuxfoundation cups-filters 1.0.47
• linuxfoundation cups-filters 1.0.48
• linuxfoundation cups-filters 1.0.49
• linuxfoundation cups-filters 1.0.50
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7188#NEWS bzr.linuxfoundation.org
- http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131485.html lists.fedoraproject.org
- http://seclists.org/oss-sec/2014/q2/13 seclists.org
- http://secunia.com/advisories/57530 Vendor Advisory
- http://www.ubuntu.com/usn/USN-2210-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1083326 bugzilla.redhat.com
- http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7188#NEWS bzr.linuxfoundation.org
- http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131485.html lists.fedoraproject.org
- http://seclists.org/oss-sec/2014/q2/13 seclists.org
- http://secunia.com/advisories/57530 Vendor Advisory
- http://www.ubuntu.com/usn/USN-2210-1 www.ubuntu.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1083326 bugzilla.redhat.com