Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2010-5325

foomatic: potential remote arbitrary code execution

Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.

CVSS 3.0 · 9.8 Critical EPSS 5.5% KEV · Not listed
Vendors
Linuxfoundation Oracle Redhat
Products
Foomatic-filters Linux Enterprise Linux and 5 more
CVE-2015-8327

cups-filters: foomatic-rip did not consider the back tick as an illegal shell escape character

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

CVSS 2.0 · 7.5 High EPSS 10.6% KEV · Not listed
Vendors
Canonical Debian Linuxfoundation and 1 more
Products
Ubuntu Linux Debian Linux Cups-filters and 7 more
CVE-2015-8560

cups-filters: foomatic-rip did not consider semicolon as illegal shell escape character

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.

CVSS 3.0 · 7.3 High EPSS 5.3% KEV · Not listed
Vendors
Canonical Debian Linuxfoundation and 1 more
Products
Ubuntu Linux Debian Linux Cups-filters and 2 more
CVE-2011-2924

foomatic: foomatic-rip (debug mode) insecure temporary file use in renderer command line by processing PostScript data

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Fedoraproject Linuxfoundation
Products
Debian Linux Fedora Foomatic-filters
CVE-2011-2923

foomatic: foomatic-rip (debug mode) insecure temporary file use in renderer command line by processing PostScript data

foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Debian Linuxfoundation
Products
Debian Linux Foomatic-filters