Unscored severity · published Apr 17, 2014
CVE-2014-2707
cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System…
–
CVSS
1.2%
EPSS
No
On KEV
Description
cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts generated for queues."
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 67% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
Cups-filters · Linuxfoundation
1.0.41; 1.0.42; 1.0.43; 1.0.44; 1.0.45; 1.0.46; +4 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2707
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2707
bzr.linuxfoundation.org
http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7188#NEWS
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2014-April/131485.html
seclists.org
http://seclists.org/oss-sec/2014/q2/13
Vendor Advisory
http://secunia.com/advisories/57530
www.ubuntu.com
http://www.ubuntu.com/usn/USN-2210-1
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1083326
More from Cups-filters
8.8
CVE-2023-24805
cups-filters contains backends, filters, and other software required to get the cups printing service working on operating systems other than macos
7.3
CVE-2015-8560
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute…
–
CVE-2015-8327
Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute…
–
CVE-2015-3279
Integer overflow in filter/texttopdf.c in texttopdf in cups-filters before 1.0.71 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code…
–
CVE-2015-3258
Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service…