Arbitrary Code Execution via Crafted FoomaticRIPCommandLine Field in Foomatic 4.0.6

Arbitrary Code Execution via Crafted FoomaticRIPCommandLine Field in Foomatic 4.0.6

CVE-2011-2964 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:P/A:P

foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file, a different vulnerability than CVE-2011-2697.

Learn more about our Web Application Penetration Testing UK.