Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

HP Linux Imaging and Printing (HPLIP) allows remote code execution

CVE-2011-2697 · published 15 years ago
Summary

A vulnerability in HP Linux Imaging and Printing (HPLIP) allows an attacker to execute malicious code on a victim's computer by sending a specially crafted print file. This could lead to unauthorized access or data theft. HP Linux Imaging and Printing users should update to the latest version to fix this issue.

What to do
  • Update debian foomatic-filters to version 4.0.
  • Update debian hplip to version 3.10.6-2.
Affected software
Ecosystem VendorProductAffected versions
Debian:11 debian foomatic-filters < 4.0
Fix: upgrade to 4.0
Debian:12 debian foomatic-filters < 4.0
Fix: upgrade to 4.0
Debian:13 debian foomatic-filters < 4.0
Fix: upgrade to 4.0
Debian:14 debian foomatic-filters < 4.0
Fix: upgrade to 4.0
Debian:11 debian hplip < 3.10.6-2
Fix: upgrade to 3.10.6-2
Debian:12 debian hplip < 3.10.6-2
Fix: upgrade to 3.10.6-2
Debian:13 debian hplip < 3.10.6-2
Fix: upgrade to 3.10.6-2
Debian:14 debian hplip < 3.10.6-2
Fix: upgrade to 3.10.6-2
– hp linux_imaging_and_printing_project 3.11.5
cpe:2.3:a:hp:linux_imaging_and_printing_project:3.11.5:*:*:*:*:*:*:*
Original advisory text
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.
References
Severity
6.8 Medium
Exploitation
11% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published29 Jul 2011
Updated24 Oct 2026
First seen8 Jun 2026
Sources
DEBIAN-CVE-2011-2697 · OSV
CVE-2011-2697 · NVD
Track software like this
Free during beta