NetSight
IP …
medium4.4

CVE-2013-6476

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileg…

Impact

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file.

Affected products

VendorProductAffected versions
CanonicalUbuntu Linux
Versions 10.04, 12.04, 12.10, 13.10
DebianDebian Linux
All versions
FedoraprojectFedora
All versions
LinuxfoundationCups-Filters
through 1.0.46
Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4

Weakness classification

CWE-264

References