cups-filters 'urftopdf.cpp' Multiple Heap Based Buffer Overflow Vulnerabilities
BID:66601
Info
cups-filters 'urftopdf.cpp' Multiple Heap Based Buffer Overflow Vulnerabilities
| Bugtraq ID: | 66601 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2013-6473 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 10 2014 12:00AM |
| Updated: | Jun 18 2014 02:13AM |
| Credit: | Florian Weimer of the Red Hat Product Security Team |
| Vulnerable: |
Gentoo Linux |
| Not Vulnerable: | |
Discussion
cups-filters 'urftopdf.cpp' Multiple Heap Based Buffer Overflow Vulnerabilities
cups-filters is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.
Successful exploits may allow attackers to execute arbitrary code with the privileges of the 'lp' user.
cups-filters is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.
Successful exploits may allow attackers to execute arbitrary code with the privileges of the 'lp' user.
Exploit / POC
cups-filters 'urftopdf.cpp' Multiple Heap Based Buffer Overflow Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
cups-filters 'urftopdf.cpp' Multiple Heap Based Buffer Overflow Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
cups-filters 'urftopdf.cpp' Multiple Heap Based Buffer Overflow Vulnerabilities
References:
References: