Main
Vulnerability Database
Exploits
ID:10880 - Exploit for Input validation error in libcupsfilters - CVE-2024-47076
ID:10880 - Exploit for Input validation error in libcupsfilters - CVE-2024-47076
Published: November 22, 2024
Vulnerability identifier: #VU97742
Vulnerability risk: High
CVE-ID: CVE-2024-47076
CWE-ID: CWE-20
Exploitation vector: Remote access
Vulnerable software:
libcupsfilters
libcupsfilters
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to compromise the target system.
The vulnerability exists due to cfGetPrinterAttributes5 does not sanitize IPP attributes returned from an IPP server. A remote attacker can provide controlled data to the rest of the CUPS system.
Remediation
Install update from vendor's website.