4.4

CVE-2013-6476

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Canonical ≫ Ubuntu Linux Version 10.04 Update - Edition lts
Canonical ≫ Ubuntu Linux Version 12.04 Update - Edition lts
Canonical ≫ Ubuntu Linux Version 12.10
Canonical ≫ Ubuntu Linux Version 13.10
Linuxfoundation ≫ Cups-filters Version <= 1.0.46
Linuxfoundation ≫ Cups-filters Version 1.0
Linuxfoundation ≫ Cups-filters Version 1.0.1
Linuxfoundation ≫ Cups-filters Version 1.0.2
Linuxfoundation ≫ Cups-filters Version 1.0.3
Linuxfoundation ≫ Cups-filters Version 1.0.4
Linuxfoundation ≫ Cups-filters Version 1.0.5
Linuxfoundation ≫ Cups-filters Version 1.0.6
Linuxfoundation ≫ Cups-filters Version 1.0.7
Linuxfoundation ≫ Cups-filters Version 1.0.8
Linuxfoundation ≫ Cups-filters Version 1.0.9
Linuxfoundation ≫ Cups-filters Version 1.0.10
Linuxfoundation ≫ Cups-filters Version 1.0.11
Linuxfoundation ≫ Cups-filters Version 1.0.12
Linuxfoundation ≫ Cups-filters Version 1.0.13
Linuxfoundation ≫ Cups-filters Version 1.0.14
Linuxfoundation ≫ Cups-filters Version 1.0.15
Linuxfoundation ≫ Cups-filters Version 1.0.16
Linuxfoundation ≫ Cups-filters Version 1.0.17
Linuxfoundation ≫ Cups-filters Version 1.0.18
Linuxfoundation ≫ Cups-filters Version 1.0.19
Linuxfoundation ≫ Cups-filters Version 1.0.20
Linuxfoundation ≫ Cups-filters Version 1.0.21
Linuxfoundation ≫ Cups-filters Version 1.0.22
Linuxfoundation ≫ Cups-filters Version 1.0.23
Linuxfoundation ≫ Cups-filters Version 1.0.24
Linuxfoundation ≫ Cups-filters Version 1.0.25
Linuxfoundation ≫ Cups-filters Version 1.0.26
Linuxfoundation ≫ Cups-filters Version 1.0.27
Linuxfoundation ≫ Cups-filters Version 1.0.28
Linuxfoundation ≫ Cups-filters Version 1.0.29
Linuxfoundation ≫ Cups-filters Version 1.0.30
Linuxfoundation ≫ Cups-filters Version 1.0.31
Linuxfoundation ≫ Cups-filters Version 1.0.32
Linuxfoundation ≫ Cups-filters Version 1.0.33
Linuxfoundation ≫ Cups-filters Version 1.0.34
Linuxfoundation ≫ Cups-filters Version 1.0.35
Linuxfoundation ≫ Cups-filters Version 1.0.36
Linuxfoundation ≫ Cups-filters Version 1.0.37
Linuxfoundation ≫ Cups-filters Version 1.0.38
Linuxfoundation ≫ Cups-filters Version 1.0.39
Linuxfoundation ≫ Cups-filters Version 1.0.40
Linuxfoundation ≫ Cups-filters Version 1.0.41
Linuxfoundation ≫ Cups-filters Version 1.0.42
Linuxfoundation ≫ Cups-filters Version 1.0.43
Linuxfoundation ≫ Cups-filters Version 1.0.44
Linuxfoundation ≫ Cups-filters Version 1.0.45
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.229
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.ubuntu.com/usn/USN-2143-1
http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7176
Patch
http://www.debian.org/security/2014/dsa-2875
http://www.debian.org/security/2014/dsa-2876
http://www.ubuntu.com/usn/USN-2144-1
https://bugzilla.redhat.com/show_bug.cgi?id=1027551