foomatic code execution
Published:		17.08.2011
Source:		BUGTRAQ
SecurityVulns ID:		11861
Type:		local
Level:		4/10
Description:		It's possible to execute code via .ppd files.

Affected:		FOOMATIC : Foomatic 4.0
		FOOMATIC : Foomatic 3.11
CVE:		CVE-2011-2964 (foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file, a different vulnerability than CVE-2011-2697.)
		CVE-2011-2697 (foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.)

Original document

MANDRIVA, [ MDVSA-2011:125 ] foomatic-filters (17.08.2011)

Discuss:

Read or add your comments to this news (0 comments)