PT-2018-5811

CVE-2017-15400

·

Published

2018-02-07

·

Updated

2018-07-13

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Google Chrome OS versions prior to 62.0.3202.74
Description: The issue is related to insufficient restriction of IPP filters in CUPS, allowing a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file. This is also referred to as a printer zeroconfig CRLF issue.
Recommendations: For Google Chrome OS versions prior to 62.0.3202.74, update to version 62.0.3202.74 or later to resolve the issue.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-93: Improper Neutralization of CRLF Sequences (\'CRLF Injection\')
Related identifiers
CVE-2017-15400
DSA-4243-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com