Description
Insufficient restriction of IPP filters in CUPS in Google Chrome OS prior to 62.0.3202.74 allowed a remote attacker to execute a command with the same privileges as the cups daemon via a crafted PPD file, aka a printer zeroconfig CRLF issue.
References (4)
Scores
CVSS v3
7.8
EPSS
0.0041
EPSS Percentile
61.4%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-93
Status
published
Products (1)
google/chrome_os
< 62.0.3202.74
Published
Feb 07, 2018
Tracked Since
Feb 18, 2026