CVE Feed

    Dashboard / CVE / CVE-2014-4336

    CVE-2014-4336

    The generate_local_queue function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the host name. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-2707.

    Published:Apr 23, 2014
    Last Modified:Apr 12, 2025
    EPS:Jun 22, 2014
    EPSS Score:0.00314
    CVSS Score:5.8

    Affected Products

    Vendor
    Linuxfoundation
    Product
    Cups-filters

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-24805 (CVSS 8.8) — cups-filters contains backends, filters, and other software required to get the cups printing service working …
    CVE-2015-8560 (CVSS 7.3) — Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomat…
    CVE-2015-8327 (CVSS 7.5) — Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomat…
    CVE-2015-3279 (CVSS 7.5) — Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to c…
    CVE-2015-3258 (CVSS 7.5) — Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters befo…
    CVE-2015-2265 (CVSS 7.5) — The remove_bad_chars function in utils/cups-browsed.c in cups-filters before 1.0.66 allows remote IPP printers…
    CVE-2014-4338 (CVSS 4) — cups-browsed in cups-filters before 1.0.53 allows remote attackers to bypass intended access restrictions in o…
    CVE-2014-4337 (CVSS 4.3) — The process_browse_data function in utils/cups-browsed.c in cups-browsed in cups-filters before 1.0.53 allows …
    CVE-2014-2707 (CVSS 8.3) — cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via…
    CVE-2013-6473 (CVSS 6.8) — Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High