NetSight
medium6.8

CVE-2013-6475

Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote att…

Impact

Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.10
DebianDebian Linux
All versions
FedoraprojectFedora
All versions
LinuxfoundationCups-Filters
through 1.0.46
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

Weakness classification

References