Red Hat Security AdvisoryRHSA-2006:0163
cups security update
Released 2006-01-11 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 cups-1:1.1.17-13.3.36, cups-1:1.1.17-13.3.36.i386, cups-devel-1:1.1.17-13.3.36 +3
- Red Hat Enterprise Linux AS version 3 cups-1:1.1.17-13.3.36, cups-1:1.1.17-13.3.36.i386, cups-1:1.1.17-13.3.36.ia64 +9
- Red Hat Enterprise Linux AS version 4 cups-1:1.1.22-0.rc1.9.10, cups-1:1.1.22-0.rc1.9.10.i386, cups-1:1.1.22-0.rc1.9.10.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 cups-1:1.1.22-0.rc1.9.10, cups-1:1.1.22-0.rc1.9.10.i386, cups-devel-1:1.1.22-0.rc1.9.10 +3
- Red Hat Enterprise Linux ES version 3 cups-1:1.1.17-13.3.36, cups-1:1.1.17-13.3.36.i386, cups-1:1.1.17-13.3.36.ia64 +6
- Red Hat Enterprise Linux ES version 4 cups-1:1.1.22-0.rc1.9.10, cups-1:1.1.22-0.rc1.9.10.i386, cups-1:1.1.22-0.rc1.9.10.ia64 +6
- Red Hat Enterprise Linux WS version 3 cups-1:1.1.17-13.3.36, cups-1:1.1.17-13.3.36.i386, cups-1:1.1.17-13.3.36.ia64 +6
- Red Hat Enterprise Linux WS version 4 cups-1:1.1.22-0.rc1.9.10, cups-1:1.1.22-0.rc1.9.10.i386, cups-1:1.1.22-0.rc1.9.10.ia64 +6
Fixes 4 records
Priority MEDIUM 49
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated usi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03823 · Published 2006-01-06 · Fixed CWE-399
Priority MEDIUM 41
Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with (1)…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05521 · Published 2006-01-06 · Fixed CWE-119
Priority LOW 29
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null derefer…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03382 · Published 2006-01-06 · Fixed CWE-399
Priority LOW 27
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDe…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02301 · Published 2006-01-06 · Fixed CWE-189
THREATIST.IORead the docs