high8.8
CVE-2014-8166
The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbit…
Impact
The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cups | Cups | before 1.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2015/03/24/15
- http://www.openwall.com/lists/oss-security/2015/03/24/2
- http://www.securityfocus.com/bid/73300
- https://bugzilla.redhat.com/show_bug.cgi?id=1084577
- http://www.openwall.com/lists/oss-security/2015/03/24/15
- http://www.openwall.com/lists/oss-security/2015/03/24/2
- http://www.securityfocus.com/bid/73300
- https://bugzilla.redhat.com/show_bug.cgi?id=1084577