HIGH🇬🇧 English

CVE-2014-8166

CVSS 8.8v3.1pub. 2018-01-12upd. 2024-11-21

The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

  • Cups

    APP
    Cups
    < 1.6
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCE
CWE
Referencje

Powiązane podatności

CVE-2018-6553HIGH8.8ten sam produkt

The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker co...

CVE-2015-1158HIGH10.0ten sam produkt

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for m...

CVE-2008-0047HIGH9.3ten sam produkt

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the ve...

CVE-2008-0882HIGH10.0ten sam produkt

Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a...

CVE-2007-4351HIGH10.0ten sam produkt

Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a deni...