PT-2008-1099 · Apple+1 · Cups+1
Regenrecht
·
Publicado
2008-10-10
·
Atualizado
2018-10-03
·
CVE-2008-3640
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
cups versions prior to 1.3.9
Description
The issue concerns multiple vulnerabilities in the cups package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Specifically, an integer overflow in the WriteProlog function in texttops allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.
Recommendations
For versions prior to 1.3.9, update to version 1.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the cups service to minimize the risk of exploitation. Avoid using the cups package to process untrusted PostScript files until the issue is resolved.
Correção
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Red Hat
Cups