PT-2008-1100 · Apple+1 · Cups+1

Published 2008-10-10 · Updated 2024-06-15 · CVE-2008-3641

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CUPS versions prior to 1.3.9

Description The issue concerns multiple vulnerabilities in the CUPS package that can be exploited remotely, potentially leading to breaches of confidentiality, integrity, and availability of protected information. Specifically, the Hewlett-Packard Graphics Language (HPGL) filter in CUPS is vulnerable, allowing remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.

Recommendations For versions prior to 1.3.9, update to version 1.3.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the HPGL filter to minimize the risk of exploitation.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-399

CWE-119

Related Identifiers

BDU:2015-09353

CVE-2008-3641

DSA-1656-1

OPENSUSE-SU-2024:10707-1

RHSA-2008:0937

RHSA-2008_0937

Affected Products

Cups

Red Hat

References · 69

• 🔥 http://cups.org/str.php?L2911 · Exploit
• 🔥 https://exploit-db.com/exploits/32470 · Exploit
• http://secunia.com/advisories/32292 · Vendor Advisory
• http://secunia.com/advisories/32284 · Vendor Advisory
• https://redhat.com/archives/fedora-package-announce/2008-October/msg00380.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-3641 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1 · Vendor Advisory
• https://usn.ubuntu.com/656-1 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200812-11.xml · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09353 · Security Note
• http://redhat.com/support/errata/RHSA-2008-0937.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2008:211 · Vendor Advisory
• http://secunia.com/advisories/32222 · Vendor Advisory