PT-2008-2963 · Red Hat · Cups+1

Published 2008-04-01 · Updated 2023-02-13 · CVE-2008-1374

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CUPS versions in Red Hat Enterprise Linux 3 and 4

Description The issue is caused by an integer overflow in the pdftops filter in CUPS, which can be exploited by remote attackers to execute arbitrary code via a crafted PDF file. This issue is a result of an incomplete fix for a previous problem.

Recommendations For Red Hat Enterprise Linux 3 and 4, update the CUPS package to a version that includes the complete fix for the integer overflow issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2008-1374

RHSA-2008:0206

RHSA-2008_0206

Affected Products

Cups

Red Hat

References · 17

• http://redhat.com/support/errata/RHSA-2008-0206.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-09622 · Security Note
• https://bdu.fstec.ru/vul/2015-01436 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-1374 · Security Note
• http://secunia.com/advisories/29630 · Note
• https://access.redhat.com/security/cve/CVE-2008-1374 · Note
• https://access.redhat.com/security/cve/CVE-2008-1373 · Note
• http://securityfocus.com/archive/1/495164/100/0/threaded · Note
• https://access.redhat.com/errata/RHSA-2008:0206 · Note
• http://secunia.com/advisories/31388 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9636 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1374 · Note
• http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0245 · Note
• https://access.redhat.com/security/cve/CVE-2008-0053 · Note
• https://issues.rpath.com/browse/RPL-2390 · Note