<p>Upgrade <code>Debian:8</code> <code>cups</code> to version 1.5.0-16 or higher.</p>

Numeric Errors Affecting cups package, versions <1.5.0-16

Snyk CVSS

Attack Complexity Low

User Interaction Required

Threat Intelligence

EPSS 6.07% (94^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk ID SNYK-DEBIAN8-CUPS-364723
published 14 Mar 2014
disclosed 14 Mar 2014

Report a new vulnerability Found a mistake?

Introduced: 14 Mar 2014

CVE-2013-6475 Open this link in a new tab CWE-189 Open this link in a new tab

How to fix?

Upgrade Debian:8 cups to version 1.5.0-16 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream cups package and not the cups package as distributed by Debian. See How to fix? for Debian:8 relevant fixed versions and status.

Multiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allow remote attackers to execute arbitrary code via a crafted PDF file, which triggers a heap-based buffer overflow.