VULNERABILITY INTELLIGENCE

CVE-2011-2924

CVSS score5.5 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2019-11-19
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Description

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges of the user running the foomatic-rip universal print filter.

Weakness classification

  • CWE-59: Improper Link Resolution Before File Access ('Link Following')

Primary references