CVE-2013-6476
Fixed in a distro release EPSS <1%
The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file.
Products: canonical ubuntu_linux, debian_linux, fedoraproject fedora, linuxfoundation cups-filters
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.5.0-16 |
| Debian 12 | cups-filters | 1.0.47-1 |
| Debian 13 | cups | 1.5.0-16 |
| Debian 13 | cups-filters | 1.0.47-1 |
| Debian 14 | cups | 1.5.0-16 |
| Debian 14 | cups-filters | 1.0.47-1 |
| Debian 6.0 | cups | 1.4.4-7+squeeze4 |
| Debian 7 | cups-filters | 1.0.18-2.1+deb7u1 |
| openSUSE Tumbleweed | cups-filters | 1.8.2-1.11 |