CVE-2024-47177 – cups-filters vulnerable to Command injection via FoomaticRIPCommandLine

https://notcve.org/view.php?id=CVE-2024-47177

26 Sep 2024 — CUPS is a standards-based, open-source printing system, and cups-filters provides backends, filters, and other software for CUPS 2.x to use on non-Mac OS systems. Any value passed to `FoomaticRIPCommandLine` via a PPD file will be executed as a user controlled command. When combined with other logic bugs as described in CVE_2024-47176, this can lead to remote command execution. • https://packetstorm.news/files/id/182767 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •