CVE-2011-2964

MEDIUM 6.8CVE-2011-2964 · Published 29/07/2011 · updated 16/06/2026

In short

CVE-2011-2964 is a MEDIUM (CVSS 6.8) vulnerability affecting foomatic (linuxfoundation).
Chance of exploitation in the next 30 days (EPSS): 5.0%, higher than 92.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
foomatic linuxfoundation	`= 4.0.6`	No fix yet

Description

foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file, a different vulnerability than CVE-2011-2697.

References

secunia.com/advisories/45477
security.gentoo.org/glsa/glsa-201203-07.xml
mandriva.com/security/advisories
openwall.com/lists/oss-security/2011/07/13/3 · Exploit
openwall.com/lists/oss-security/2011/07/18/3 · Exploit
openwall.com/lists/oss-security/2011/07/28/1 · Exploit
redhat.com/support/errata/RHSA-2011-1110.html
ubuntu.com/usn/USN-1194-1
xerox.com/download/security/security-bulletin/16287-4d6b7b0c81f7b/cert_XRX13-003_v1.0.pdf
bugzilla.novell.com/show_bug.cgi · Exploit
bugzilla.redhat.com/show_bug.cgi · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/68994

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free