CVE-2013-6473

Multiple heap-based buffer overflows in the urftopdf filter in cups-filters 1.0.25 before 1.0.47 allow remote attackers to execute arbitrary code via a large (1) page or (2) line in a URF file.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.8 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
VendorProductVersion
canonicalubuntu_linux
13.10
linuxfoundationcups-filters
1.0.25
linuxfoundationcups-filters
1.0.26
linuxfoundationcups-filters
1.0.27
linuxfoundationcups-filters
1.0.28
linuxfoundationcups-filters
1.0.29
linuxfoundationcups-filters
1.0.30
linuxfoundationcups-filters
1.0.31
linuxfoundationcups-filters
1.0.32
linuxfoundationcups-filters
1.0.33
linuxfoundationcups-filters
1.0.34
linuxfoundationcups-filters
1.0.35
linuxfoundationcups-filters
1.0.36
linuxfoundationcups-filters
1.0.37
linuxfoundationcups-filters
1.0.38
linuxfoundationcups-filters
1.0.39
linuxfoundationcups-filters
1.0.40
linuxfoundationcups-filters
1.0.41
linuxfoundationcups-filters
1.0.42
linuxfoundationcups-filters
1.0.43
linuxfoundationcups-filters
1.0.44
linuxfoundationcups-filters
1.0.45
linuxfoundationcups-filters
1.0.46
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
cups-filters
bullseye
1.28.7-1+deb11u2
fixed
wheezy
not-affected
bullseye (security)
1.28.7-1+deb11u3
fixed
bookworm
1.28.17-3
fixed
bookworm (security)
1.28.17-3+deb12u1
fixed
sid
1.28.17-5
fixed
trixie
1.28.17-5
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
cups
saucy
not-affected
quantal
not-affected
precise
not-affected
lucid
not-affected
cups-filters
saucy
Fixed 1.0.40-0ubuntu1.1
released
quantal
not-affected
precise
not-affected
lucid
dne