CVE-2015-8327

High

Published: 17/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2015-8327 describes an incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters before version 1.2.0 and in foomatic-filters in Foomatic 4.0.x. This allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Risk Assessment

Organizations may be exposed to remote code execution, potentially leading to system compromise or data leakage.

Recommendation

It is recommended to update cups-filters to version 1.2.0 or later and foomatic-filters to the latest version to mitigate this vulnerability.

Other vulnerabilities in cups-filters, foomatic-filters

CVE-2015-8560High
CVE-2015-8560 describes an incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters before version 1.4.0 and in foomatic-filters in Foomatic 4.0.x. This allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job.

Original NVD description (English source)

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.