Red Hat Security AdvisoryRHSA-2007:1022
cups security update
Released 2007-11-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 cups-1:1.1.22-0.rc1.9.20.2.el4_5.2, cups-1:1.1.22-0.rc1.9.20.2.el4_5.2.i386, cups-1:1.1.22-0.rc1.9.20.2.el4_5.2.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 cups-1:1.1.22-0.rc1.9.20.2.el4_5.2, cups-1:1.1.22-0.rc1.9.20.2.el4_5.2.i386, cups-devel-1:1.1.22-0.rc1.9.20.2.el4_5.2 +3
- Red Hat Enterprise Linux ES version 4 cups-1:1.1.22-0.rc1.9.20.2.el4_5.2, cups-1:1.1.22-0.rc1.9.20.2.el4_5.2.i386, cups-1:1.1.22-0.rc1.9.20.2.el4_5.2.ia64 +6
- Red Hat Enterprise Linux WS version 4 cups-1:1.1.22-0.rc1.9.20.2.el4_5.2, cups-1:1.1.22-0.rc1.9.20.2.el4_5.2.i386, cups-1:1.1.22-0.rc1.9.20.2.el4_5.2.ia64 +6
Fixes 5 records
Priority MEDIUM 53
Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (I…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07377 · Published 2007-10-31 · Fixed CWE-189
Priority MEDIUM 49
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 49
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06408 · Published 2007-11-08 · Fixed CWE-119
Priority MEDIUM 43
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruptio…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.0702 · Published 2007-11-08 · Fixed
Priority LOW 30
The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that intr…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04595 · Published 2007-07-27 · Fixed
THREATIST.IORead the docs