PT-2008-1100 · Apple+1 · Cups+1
Publicado
2008-10-10
·
Atualizado
2024-06-15
·
CVE-2008-3641
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
CUPS versions prior to 1.3.9
Description
The issue concerns multiple vulnerabilities in the CUPS package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Specifically, the Hewlett-Packard Graphics Language (HPGL) filter in CUPS is vulnerable, allowing remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.
Recommendations
For versions prior to 1.3.9, update to version 1.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the HPGL filter to minimize the risk of exploitation.
Exploit
Correção
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cups
Red Hat