ISOMAN

CVE

CVE-2013-6476

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file.

Severity
MEDIUM
CVSS
4.4
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Debian13.5.0 amd64 netinstunknownsource
Debian13.5.0 amd64 edu netinstunknownsource
Debian13.5.0 amd64 mac netinstunknownsource
Debian13.5.0 arm64 netinstunknownsource
Debian13.5.0 amd64 dvd-1unknownsource
Debian13.5.0 arm64 dvd-1unknownsource
Debian13.5.0 amd64 live gnomeunknownsource
Debian13.5.0 amd64 live kdeunknownsource
Debian13.5.0 amd64 live cinnamonunknownsource
Debian13.5.0 amd64 live lxdeunknownsource
Debian13.5.0 amd64 live lxqtunknownsource
Debian13.5.0 amd64 live mateunknownsource
Debian13.5.0 amd64 live xfceunknownsource
Debian13.5.0 amd64 live standardunknownsource
Debian13.5.0 amd64 live debian-juniorunknownsource
Fedora Linux44 x86_64 workstation liveunknownsource
Fedora Linux44 x86_64 server dvdunknownsource
Fedora Linux44 x86_64 server netinstunknownsource
Fedora Linux44 x86_64 everything netinstunknownsource
Fedora Linux44 x86_64 budgie liveunknownsource
Fedora Linux44 x86_64 cosmic liveunknownsource
Fedora Linux44 x86_64 cinnamon liveunknownsource
Fedora Linux44 x86_64 kde-mobile liveunknownsource
Fedora Linux44 x86_64 lxde liveunknownsource
Fedora Linux44 x86_64 lxqt liveunknownsource
Fedora Linux44 x86_64 mate-compiz liveunknownsource
Fedora Linux44 x86_64 miraclewm liveunknownsource
Fedora Linux44 x86_64 soas liveunknownsource
Fedora Linux44 x86_64 sway liveunknownsource
Fedora Linux44 x86_64 xfce liveunknownsource
Fedora Linux44 x86_64 i3 liveunknownsource
Fedora Linux44 x86_64 astronomy-kde liveunknownsource
Fedora Linux44 x86_64 design-suite liveunknownsource
Fedora Linux44 x86_64 games liveunknownsource
Fedora Linux44 x86_64 jam-kde liveunknownsource
Fedora Linux44 x86_64 python-classroom liveunknownsource
Fedora Linux44 x86_64 robotics liveunknownsource
Fedora Linux44 x86_64 scientific-kde liveunknownsource
Fedora Linux44 x86_64 security liveunknownsource
Debian13.5.0 armhf netinstunknownsource
Debian13.5.0 ppc64el netinstunknownsource
Debian13.5.0 riscv64 netinstunknownsource
Debian13.5.0 s390x netinstunknownsource
Debian13.5.0 armhf dvd-1unknownsource
Debian13.5.0 ppc64el dvd-1unknownsource
Debian13.5.0 riscv64 dvd-1unknownsource
Debian13.5.0 s390x dvd-1unknownsource
Debian13.6.0 amd64 netinstunknownsource
Debian13.6.0 amd64 edu netinstunknownsource
Debian13.6.0 amd64 mac netinstunknownsource
Debian13.6.0 arm64 netinstunknownsource
Debian13.6.0 amd64 dvd-1unknownsource
Debian13.6.0 arm64 dvd-1unknownsource
Debian13.6.0 amd64 live gnomeunknownsource
Debian13.6.0 amd64 live kdeunknownsource
Debian13.6.0 amd64 live cinnamonunknownsource
Debian13.6.0 amd64 live lxdeunknownsource
Debian13.6.0 amd64 live lxqtunknownsource
Debian13.6.0 amd64 live mateunknownsource
Debian13.6.0 amd64 live xfceunknownsource
Debian13.6.0 amd64 live standardunknownsource
Debian13.6.0 amd64 live debian-juniorunknownsource
Debian13.6.0 armhf netinstunknownsource
Debian13.6.0 ppc64el netinstunknownsource
Debian13.6.0 riscv64 netinstunknownsource
Debian13.6.0 s390x netinstunknownsource
Debian13.6.0 armhf dvd-1unknownsource
Debian13.6.0 ppc64el dvd-1unknownsource
Debian13.6.0 riscv64 dvd-1unknownsource
Debian13.6.0 s390x dvd-1unknownsource

References

  1. http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7176
  2. http://www.debian.org/security/2014/dsa-2875
  3. http://www.debian.org/security/2014/dsa-2876
  4. http://www.ubuntu.com/usn/USN-2143-1
  5. http://www.ubuntu.com/usn/USN-2144-1
  6. https://bugzilla.redhat.com/show_bug.cgi?id=1027551
  7. http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7176
  8. http://www.debian.org/security/2014/dsa-2875
  9. http://www.debian.org/security/2014/dsa-2876
  10. http://www.ubuntu.com/usn/USN-2143-1
  11. http://www.ubuntu.com/usn/USN-2144-1
  12. https://bugzilla.redhat.com/show_bug.cgi?id=1027551