PT-2009-6737 · Suse+1 · Cups-Devel+8

Alin Rad Pop + 1 · Publicado 1970-01-01 · Atualizado 2019-03-06 · CVE-2009-0165

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions cups versions (affected versions not specified) cups-libs versions (affected versions not specified) cups-libs-32bit versions (affected versions not specified) cups-libs-x86 versions (affected versions not specified) cups-client versions (affected versions not specified) cups-debuginfo versions (affected versions not specified) cups-debugsource versions (affected versions not specified) cups-devel versions (affected versions not specified) Xpdf version 3.02pl2 and earlier

Description The issue involves multiple vulnerabilities in various packages of the SUSE Linux Enterprise operating system, including cups, cups-libs, cups-libs-32bit, cups-libs-x86, cups-client, cups-debuginfo, cups-debugsource, and cups-devel. These vulnerabilities can be exploited remotely and may lead to a breach of confidentiality, integrity, and availability of protected information. Additionally, an integer overflow vulnerability was found in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, which may have unspecified impact related to memory allocation.

Recommendations For cups, cups-libs, cups-libs-32bit, cups-libs-x86, cups-client, cups-debuginfo, cups-debugsource, and cups-devel, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Xpdf version 3.02pl2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-399

CWE-119

CWE-189

Identificadores relacionados

BDU:2015-04161

BDU:2015-04162

BDU:2015-04163

BDU:2015-04164

BDU:2015-04165

BDU:2015-04166

BDU:2015-04167

BDU:2015-04168

CVE-2009-0165

DSA-1790-1

DSA-1793-1

Produtos afetados

Xpdf

Cups

Cups-Client

Cups-Debuginfo

Cups-Debugsource

Cups-Devel

Cups-Libs

Cups-Libs-32Bit

Cups-Libs-X86

Referências · 37

• https://bdu.fstec.ru/vul/2015-04167 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2009-0165 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04166 · Nota de Segurança
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1621 · Nota
• http://vupen.com/english/advisories/2009/1297 · Nota
• http://us-cert.gov/cas/techalerts/TA09-133A.html · Nota
• https://security-tracker.debian.org/tracker/CVE-2009-0165 · Aviso do Fabricante
• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-04162 · Nota de Segurança
• http://mandriva.com/security/advisories?name=MDVSA-2009:101 · Aviso do Fabricante
• http://secunia.com/advisories/34991 · Nota
• http://secunia.com/advisories/35037 · Nota
• http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html · Aviso do Fabricante
• http://secunia.com/advisories/34959 · Nota