CVE-2013-6474: Buffer Overflow
A heap-based buffer overflow flaw was found in the pdftoopvp filter. If a malicious PDF file were processed, it could lead to arbitrary code execution with the privileges of the "lp" user. This issue was due to the following fix not being present in pdftoopvp:
https://bugs.freedesktop.org/showbug.cgi?id=17326 http://lists.freedesktop.org/archives/poppler/2008-August/004021.html
Acknowledgements:
This issue was discovered by Florian Weimer of the Red Hat Product Security Team.
Other sources
Heap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows remote attackers to execute arbitrary code via a crafted PDF file.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/cupsto a version that resolves this vulnerability.Fixed in 2.3.3op2-3+deb11u8Fixed in 2.3.3op2-3+deb11u9Fixed in 2.4.2-3+deb12u8Fixed in 2.4.10-2 - Upgrade
Upgrade
debian/cups-filtersto a version that resolves this vulnerability.Fixed in 1.28.7-1+deb11u2Fixed in 1.28.7-1+deb11u3Fixed in 1.28.17-3+deb12u1Fixed in 1.28.17-6 - Upgrade
Upgrade
CUPS and cups-filters (pdftoopvp filter)to a version that resolves this vulnerability.Fixed in 1.0.47
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6474?
CVE-2013-6474 is classified as a critical vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2013-6474?
To fix CVE-2013-6474, update the affected packages to the latest versions specified in the advisory.
What systems are affected by CVE-2013-6474?
CVE-2013-6474 affects multiple versions of the CUPS and CUPS-filters packages on various Linux distributions.
Can CVE-2013-6474 be exploited remotely?
Yes, CVE-2013-6474 can be exploited remotely by processing a malicious PDF file.
Does CVE-2013-6474 affect all versions of CUPS?
No, CVE-2013-6474 specifically affects versions of CUPS and CUPS-filters prior to certain patched releases.