CVE-2015-2265
HighSummary
The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the model or PDL.
Risk Assessment
This vulnerability may lead to remote code execution, posing a serious threat to the security of the system and the organization's data.
Recommendation
It is recommended to upgrade to cups-filters version 1.0.66 or later to mitigate this vulnerability.
Other vulnerabilities in cups-filters
See all- CVE-2015-3279High
Integer overflow in filter/texttopdf.c in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted line size in a print job, which triggers a heap-based buffer overflow.
- CVE-2015-3258High
Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in cups-filters before version 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.
- CVE-2014-2707High
Cups-browsed in cups-filters version 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the model or PDL, related to System V interface scripts generated for queues.
Original NVD description (English source)
The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers to execute arbitrary commands via consecutive shell metacharacters in the (1) model or (2) PDL. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.