CVE-2013-6476 - CVE House

Status published Medium CVE-2013-6476

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in...

4.4 CVSS

Vulnerability Description

The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2013-6476

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from canonical

View All →

CVE-2025-31479

canonical/get-workflow-version-action can leak a partial GITHUB_TOKEN in exception output

High 8.2

CVE-2025-24375

MySQL K8s charm could leak credentials for root-level user `serverconfig`

Medium 5

CVE-2024-41129

The ops library leaks secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

Medium 4.4

CVE-2020-8632

In cloud-init through 19.4, rand_user_password in cloudinit/config/cc_set_passwords.py has a small...

Medium 5.5

CVE-2020-8631

cloud-init through 19.4 relies on Mersenne Twister for a random...

Medium 5.5

Affected Vendor

canonical

View all reports →

Affected Software

ubuntu linux, debian linux, fedora, cups-filters

Vulnerable Versions:

10.04, 12.04, 12.10, 13.10, 0, 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.12, 1.0.13, 1.0.14, 1.0.15, 1.0.16, 1.0.17, 1.0.18, 1.0.19, 1.0.20, 1.0.21, 1.0.22, 1.0.23, 1.0.24, 1.0.25, 1.0.26, 1.0.27, 1.0.28, 1.0.29, 1.0.30, 1.0.31, 1.0.32, 1.0.33, 1.0.34, 1.0.35, 1.0.36, 1.0.37, 1.0.38, 1.0.39, 1.0.40, 1.0.41, 1.0.42, 1.0.43, 1.0.44, 1.0.45

Timeline

Official Publish: March 14th, 2014

Last Modified: August 6th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.