CVE-2015-3258
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.9%
exploitation probability
7.9%top 5% of all CVEs
observed exploitation
nono source reports it
Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf in cups-filters before 1.0.70 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a small line size in a print job.
Affected products
n/a · n/aReferences
http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/revision/7363http://lists.opensuse.org/opensuse-updates/2015-07/msg00033.htmlhttp://rhn.redhat.com/errata/RHSA-2015-2360.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=1235385https://security.gentoo.org/glsa/201510-08http://ubuntu.com/usn/usn-2659-1http://www.debian.org/security/2015/dsa-3303http://www.openwall.com/lists/oss-security/2015/06/26/4http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.htmlhttp://www.securityfocus.com/bid/75436