CVE-2013-6475

Published: 07 March 2014

Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow.

Priority

Medium

Status

Package Release Status
cups
Launchpad, Ubuntu, Debian
Upstream Needs triage

cups-filters
Launchpad, Ubuntu, Debian
Upstream
Released (1.0.47)