CVE-2015-8327

Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x allows remote attackers to execute arbitrary commands via ` (backtick) characters in a print job.

Date published : 2015-12-17

http://www.securityfocus.com/bid/78524

http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/annotate/head:/NEWS