PT-2009-6737 · Suse+1 · Cups-Devel+8

Alin Rad Pop + 1 · Published 1970-01-01 · Updated 2019-03-06 · CVE-2009-0165

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions cups versions (affected versions not specified) cups-libs versions (affected versions not specified) cups-libs-32bit versions (affected versions not specified) cups-libs-x86 versions (affected versions not specified) cups-client versions (affected versions not specified) cups-debuginfo versions (affected versions not specified) cups-debugsource versions (affected versions not specified) cups-devel versions (affected versions not specified) Xpdf version 3.02pl2 and earlier

Description The issue involves multiple vulnerabilities in various packages of the SUSE Linux Enterprise operating system, including cups, cups-libs, cups-libs-32bit, cups-libs-x86, cups-client, cups-debuginfo, cups-debugsource, and cups-devel. These vulnerabilities can be exploited remotely and may lead to a breach of confidentiality, integrity, and availability of protected information. Additionally, an integer overflow vulnerability was found in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, which may have unspecified impact related to memory allocation.

Recommendations For cups, cups-libs, cups-libs-32bit, cups-libs-x86, cups-client, cups-debuginfo, cups-debugsource, and cups-devel, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Xpdf version 3.02pl2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-399

CWE-119

CWE-189

Related Identifiers

BDU:2015-04161

BDU:2015-04162

BDU:2015-04163

BDU:2015-04164

BDU:2015-04165

BDU:2015-04166

BDU:2015-04167

BDU:2015-04168

CVE-2009-0165

DSA-1790-1

DSA-1793-1

Affected Products

Xpdf

Cups

Cups-Client

Cups-Debuginfo

Cups-Debugsource

Cups-Devel

Cups-Libs

Cups-Libs-32Bit

Cups-Libs-X86

References · 37

• https://bdu.fstec.ru/vul/2015-04167 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-0165 · Security Note
• https://bdu.fstec.ru/vul/2015-04166 · Security Note
• http://lists.opensuse.org/opensuse-security-announce/2009-05/msg00000.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-0165 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04162 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2009:101 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00011.html · Vendor Advisory
• http://debian.org/security/2009/dsa-1790 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-04165 · Security Note
• https://bdu.fstec.ru/vul/2015-04161 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0165 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.578477 · Vendor Advisory