Red Hat Security AdvisoryRHSA-2008:0192
cups security update
Released 2008-04-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) cups-1:1.2.4-11.14.el5_1.6, cups-1:1.2.4-11.14.el5_1.6.i386, cups-1:1.2.4-11.14.el5_1.6.ia64 +13
- Red Hat Enterprise Linux Desktop (v. 5 client) cups-1:1.2.4-11.14.el5_1.6, cups-1:1.2.4-11.14.el5_1.6.i386, cups-devel-1:1.2.4-11.14.el5_1.6.i386 +4
- Red Hat Enterprise Linux Desktop Workstation (v. 5 client) cups-1:1.2.4-11.14.el5_1.6, cups-devel-1:1.2.4-11.14.el5_1.6, cups-devel-1:1.2.4-11.14.el5_1.6.i386
Fixes 3 records
Priority MEDIUM 54
Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08282 · Published 2008-03-18 · Fixed CWE-119
Priority MEDIUM 50
Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06773 · Published 2008-03-18 · Fixed CWE-119
Priority LOW 30
Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.
CVSS 2.0MEDIUM 5.8· Adjacent network · No auth · Interaction — · EPSS 0.02171 · Published 2008-04-04 · Fixed CWE-119
THREATIST.IORead the docs