Privilege Escalation Vulnerability in CUPS Products by Apple

CVE-2013-6476

Summary

The OPVPWrapper::loadDriver function in the pdftoopvp filter within CUPS and cups-filters prior to version 1.0.47 is susceptible to exploitation. Local users can place a malicious driver within the same directory as a PDF file, potentially leading to unprivileged privilege escalation. This flaw poses a significant security risk, allowing unauthorized access to system functions by manipulating the driver loading process.

References