Command Injection Vulnerability in CUPS-Filters Affecting Linux Distributions

CVE-2014-2707

Summary

A command injection vulnerability exists in the CUPS Filters version 1.0.41 and earlier, specifically within the cups-browsed component. This vulnerability could allow remote IPP (Internet Printing Protocol) printers to execute arbitrary commands on the host system. The exploitation occurs through shell metacharacters in the model or page description language (PDL) input, which are improperly handled in the generation of System V interface scripts for print queues. This could potentially lead to unauthorized command execution and system compromise if left unaddressed. It is crucial for users of affected versions to apply the necessary updates to mitigate this risk.

References