CVE-2011-2924
- State
- Published
- Severity
- Not scored
- Published
- Nov 19, 2019
- Updated
- Aug 6, 2024
- Reserved
- Jul 27, 2011
Description
foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
foomatic-filtersfoomatic-filters |
|
References
- https://security-tracker.debian.org/tracker/CVE-2011-2924
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-2924
- https://access.redhat.com/security/cve/cve-2011-2924
- https://www.openwall.com/lists/oss-security/2014/02/08/5/1
- https://lwn.net/Articles/459979/
- https://launchpad.net/ubuntu/+source/foomatic-filters/4.0.12-1
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.