PT-2008-1011 · Apple+1 · Libcupsys2-Gnutls10+2

Publicado

2008-03-18

·

Atualizado

2017-09-29

·

CVE-2008-0053

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions CUPS versions prior to 1.3.6 cups versions prior to 1.2.12-r7 libcupsys2-gnutls10 (affected versions not specified)
Description The issue is related to multiple buffer overflows in the HP-GL/2-to-PostScript filter, which might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file. Additionally, there are multiple vulnerabilities in the libcupsys2-gnutls10 and cups packages that can lead to violations of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely.
Recommendations For CUPS versions prior to 1.3.6, update to version 1.3.6 or later. For cups versions prior to 1.2.12-r7, update to version 1.2.12-r7 or later. For libcupsys2-gnutls10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-01436
BDU:2015-09622
CVE-2008-0053
DSA-1625-1
RHSA-2008:0192
RHSA-2008:0206
RHSA-2008_0192
RHSA-2008_0206

Produtos afetados

Cups
Red Hat
Libcupsys2-Gnutls10