CVE-2014-8166 in Apple CUPS
Summary
The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackers to execute arbitrary code via a crafted printer name.
Reservation
10/10/2014
Disclosure
01/12/2018
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 74131 | Apple CUPS ANSI Escape Sequence input validation | 20 | Unproven | Official fix | CVE-2014-8166 |