View at Official debian advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2013-6476 not yet assigned priority: Debian including 2 source packages (cups, cups-filters), 10 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 10.
The OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows local users to gain privileges via a Trojan horse driver in the same directory as the PDF file.