CVE-2013-6476: The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filte...

Security readout for executives and security teams

This flaw lets a local user abuse PDF printing support to gain higher privileges when vulnerable CUPS or cups-filters components process a PDF. It is not described as remotely exploitable, but it matters on shared Linux systems, print servers, and desktops where untrusted local users can submit print jobs. Exposure is most likely on Linux systems running affected CUPS or cups-filters versions before 1.0.47, especially shared hosts or print servers that process PDFs from local users. The source bundle does not provide complete distro version mapping. Treat this as a moderate local privilege-escalation issue. Prioritize shared Linux hosts and print servers first, then desktops. It is less urgent than a remotely exploitable bug, but unpatched multi-user environments carry meaningful escalation risk. Mitigation focus: Apply relevant Ubuntu, Debian, Red Hat, or vendor CUPS/cups-filters security updates.; Confirm cups-filters is updated to a fixed release, including 1.0.47 or later where applicable.; If patching is delayed, restrict print submission to trusted local users..

Prepared

Jun 14, 2026, 14:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.