A boundary error in the ParseCommand() function of CUPS version 1.x allows for a buffer overflow attack.