CVE-2013-6475
Fixed in a distro release EPSS 3%
Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow.
Products: canonical ubuntu_linux, debian_linux, fedoraproject fedora, linuxfoundation cups-filters
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.5.0-16 |
| Debian 12 | cups-filters | 1.0.47-1 |
| Debian 13 | cups | 1.5.0-16 |
| Debian 13 | cups-filters | 1.0.47-1 |
| Debian 14 | cups | 1.5.0-16 |
| Debian 14 | cups-filters | 1.0.47-1 |
| Debian 6.0 | cups | 1.4.4-7+squeeze4 |
| Debian 7 | cups-filters | 1.0.18-2.1+deb7u1 |
| openSUSE Tumbleweed | cups-filters | 1.8.2-1.11 |