PT-2015-4350 · Apple+4 · Cups+4
Peter De Wachter
·
Publicado
2015-02-15
·
Atualizado
2018-10-30
·
CVE-2014-9679
CVSS v2.0
6.8
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
CUPS versions prior to 2.0.2
Description
The issue is caused by an integer underflow in the cupsRasterReadPixels function, which can be triggered by a malformed compressed raster file. This can lead to a buffer overflow, allowing remote attackers to have an unspecified impact.
Recommendations
For versions prior to 2.0.2, update to version 2.0.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the cupsRasterReadPixels function until a patch is available.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cups
Centos
Red Hat
Suse
Ubuntu