CVE-2004-1267: Easy Software Products Cups

Medium severity, CVSS 6.5. EPSS: 6.3% chance of exploitation in the next 30 days.

Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attackers to execute arbitrary code via a crafted HPGL file.

Affected products

• Easy Software Products Cups: version 1.0.4 only; version 1.0.4_8 only; version 1.1.1 only; version 1.1.4 only; version 1.1.4_2 only; version 1.1.4_3 only; …
• Red Hat Fedora Core: version core_2.0 only; version core_3.0 only

Published 2005-01-10. Last modified 2026-06-16.