PT-2015-1560

CVE-2015-3279

·

تاريخ النشر

2015-07-03

·

تاريخ التحديث

2024-06-15

الوصف من

CVSS 2.0
7.5
عالية
المقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions cups-filters versions prior to 1.0.71
Description The issue is related to an integer overflow in the texttopdf function of the cups-filters package, which can cause a heap-based buffer overflow. This can lead to a denial of service or possibly allow remote attackers to execute arbitrary code via a crafted line size in a print job.
Recommendations For versions prior to 1.0.71, update to version 1.0.71 or later to resolve the issue. As a temporary workaround, consider restricting access to the texttopdf function to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
ALT-PU-2015-1609
CESA-2015_2360
DLA-314-1
DSA-3303-1
MGASA-2015-0270
OPENSUSE-SU-2024:10313-1
RHSA-2015:2360
RHSA-2015_2360
SUSE-SU-2015:1377-1
USN-2659-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾