CVE-2011-2964 foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file, a different vulnerabil...
MediumCVSS 6.8
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file, a different vulnerability than CVE-2011-2697.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/foomatic-filters(Debian:12) | < 4.0.9-1 | 4.0.9-1 |
| debian/foomatic-filters(Debian:13) | < 4.0.9-1 | 4.0.9-1 |
| debian/foomatic-filters(Debian:14) | < 4.0.9-1 | 4.0.9-1 |
| linuxfoundation foomatic | = 4.0.6 | No fix listed |
References
- Debian Security Tracker CVE-2011-2964 vendor-advisory
- 45477 third-party-advisory
- GLSA-201203-07 vendor-advisory
- MDVSA-2011:125 vendor-advisory
- [oss-security] 20110713 CVE Request: hplip/foomatic-filters exploit mailing-list patch
- [oss-security] 20110718 Re: CVE Request: hplip/foomatic-filters exploit mailing-list patch
- [oss-security] 20110728 Re: CVE Request: hplip/foomatic-filters exploit mailing-list patch
- RHSA-2011:1110 vendor-advisory
- USN-1194-1 vendor-advisory
- www.xerox.com
- bugzilla.novell.com exploit patch
- bugzilla.redhat.com exploit patch
- foomatic-foomatic-code-execution(68994) vdb-entry