CVE Feed

    Dashboard / CVE / CVE-2014-2707

    CVE-2014-2707

    cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts generated for queues."

    Published:Apr 1, 2014
    Last Modified:Apr 12, 2025
    EPS:Apr 17, 2014
    EPSS Score:0.01338
    CVSS Score:8.3

    Affected Products

    Vendor
    Linuxfoundation
    Product
    Cups-filters

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-24805 (CVSS 8.8) — cups-filters contains backends, filters, and other software required to get the cups printing service working …
    CVE-2015-8560 (CVSS 7.3) — Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomat…
    CVE-2015-8327 (CVSS 7.5) — Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomat…
    CVE-2015-3279 (CVSS 7.5) — Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to c…
    CVE-2015-3258 (CVSS 7.5) — Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters befo…
    CVE-2015-2265 (CVSS 7.5) — The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers…
    CVE-2014-4338 (CVSS 4) — cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in o…
    CVE-2014-4336 (CVSS 5.8) — The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows…
    CVE-2014-4337 (CVSS 4.3) — The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows …
    CVE-2013-6473 (CVSS 6.8) — Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High