Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via a ; (semicolon) character in a print job, a different vulnerability than CVE-2015-8327.
{
"binaries": [
{
"binary_name": "cups-browsed",
"binary_version": "1.0.52-0ubuntu1.7"
},
{
"binary_name": "cups-filters",
"binary_version": "1.0.52-0ubuntu1.7"
},
{
"binary_name": "cups-filters-core-drivers",
"binary_version": "1.0.52-0ubuntu1.7"
},
{
"binary_name": "libcupsfilters-dev",
"binary_version": "1.0.52-0ubuntu1.7"
},
{
"binary_name": "libcupsfilters1",
"binary_version": "1.0.52-0ubuntu1.7"
},
{
"binary_name": "libfontembed-dev",
"binary_version": "1.0.52-0ubuntu1.7"
},
{
"binary_name": "libfontembed1",
"binary_version": "1.0.52-0ubuntu1.7"
}
],
"availability": "No subscription required"
}