PT-2009-3224 · Apple · Cups

Keishi.Sonoda · Publicado 2009-02-20 · Atualizado 2023-02-13 · CVE-2009-0577

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CUPS version 1.1.17

Description The issue is caused by an integer overflow in the WriteProlog function in texttops, which can be exploited by remote attackers to execute arbitrary code. This is achieved by sending a crafted PostScript file that triggers a heap-based buffer overflow.

Recommendations For CUPS version 1.1.17, consider applying a patch or fix to address the integer overflow issue in the WriteProlog function. As a temporary workaround, restrict access to the texttops functionality to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2009-0577

RHSA-2009:0308

Produtos afetados

Cups

Referências · 8

• http://support.avaya.com/elmodocs2/security/ASA-2009-064.htm · Nota
• http://redhat.com/support/errata/RHSA-2009-0308.html · Aviso do Fabricante
• http://secunia.com/advisories/33995 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=486052 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48977 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9968 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0577 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0577 · Nota