CVE-2011-2964

Published: Jul 29, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file, a different vulnerability than CVE-2011-2697.

Affected (1)

Products: Linuxfoundation: Foomatic

Linuxfoundation

1 product

Foomatic

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Linuxfoundation Foomatic	Version 4.0.6

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (24)

http://secunia.com/advisories/45477

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-201203-07.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2011:125

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2011/07/13/3

Source: cve@mitre.org

ExploitPatch

http://www.openwall.com/lists/oss-security/2011/07/18/3

Source: cve@mitre.org

ExploitPatch

http://www.openwall.com/lists/oss-security/2011/07/28/1

Source: cve@mitre.org

ExploitPatch

http://www.redhat.com/support/errata/RHSA-2011-1110.html

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-1194-1

Source: cve@mitre.org

http://www.xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf

Source: cve@mitre.org

https://bugzilla.novell.com/show_bug.cgi?id=698451

Source: cve@mitre.org

ExploitPatch

https://bugzilla.redhat.com/show_bug.cgi?id=721001

Source: cve@mitre.org

ExploitPatch

https://exchange.xforce.ibmcloud.com/vulnerabilities/68994

Source: cve@mitre.org

http://secunia.com/advisories/45477