Owning Internet Printing - A Case Study in Modern Software Exploitation
Project Zero published a full exploit chain for two CUPS bugs: CVE-2015-1158, a reference-count over-decrement in cupsd string handling that lets an attacker free an arbitrary global string, and CVE-2015-1159, a cross-site scripting bug in the CUPS...