CVE-2015-8560

Name of the Vulnerable Software and Affected Versions cups-filters versions 1.0.42 through 1.4.0 Foomatic versions 4.0.x

Description The issue allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job. This is due to an incomplete blacklist vulnerability in util.c in foomatic-rip.

Recommendations For cups-filters versions 1.0.42 through 1.4.0, update to version 1.4.0 or later. For Foomatic versions 4.0.x, consider disabling the foomatic-rip function until a patch is available. Restrict access to the util.c module to minimize the risk of exploitation.