CVE-2014-8166

· HIGHModified

← All CVEs

CVSS v3.1

8.8

EPSS

3.70%

Published

Jan 12, 2018

Modified

Nov 20, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-20

Affected Products (1)

cups · cups (up to 1.6)vulnerable

References (8)

http://www.openwall.com/lists/oss-security/2015/03/24/15

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2015/03/24/2

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/73300

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1084577

Issue TrackingPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2015/03/24/15

Mailing ListThird Party Advisory

http://www.openwall.com/lists/oss-security/2015/03/24/2

Mailing ListThird Party Advisory

http://www.securityfocus.com/bid/73300

Third Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1084577

Issue TrackingPatchThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs