Red Hat Security AdvisoryRHSA-2008:0206
cups security update
Released 2008-04-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 cups-1:1.1.17-13.3.52, cups-1:1.1.17-13.3.52.i386, cups-devel-1:1.1.17-13.3.52 +3
- Red Hat Enterprise Linux AS version 3 cups-1:1.1.17-13.3.52, cups-1:1.1.17-13.3.52.i386, cups-1:1.1.17-13.3.52.ia64 +9
- Red Hat Enterprise Linux AS version 4 cups-1:1.1.22-0.rc1.9.20.2.el4_6.6, cups-1:1.1.22-0.rc1.9.20.2.el4_6.6.i386, cups-1:1.1.22-0.rc1.9.20.2.el4_6.6.ia64 +9
- Red Hat Enterprise Linux Desktop version 4 cups-1:1.1.22-0.rc1.9.20.2.el4_6.6, cups-1:1.1.22-0.rc1.9.20.2.el4_6.6.i386, cups-devel-1:1.1.22-0.rc1.9.20.2.el4_6.6 +3
- Red Hat Enterprise Linux ES version 3 cups-1:1.1.17-13.3.52, cups-1:1.1.17-13.3.52.i386, cups-1:1.1.17-13.3.52.ia64 +6
- Red Hat Enterprise Linux ES version 4 cups-1:1.1.22-0.rc1.9.20.2.el4_6.6, cups-1:1.1.22-0.rc1.9.20.2.el4_6.6.i386, cups-1:1.1.22-0.rc1.9.20.2.el4_6.6.ia64 +6
- Red Hat Enterprise Linux WS version 3 cups-1:1.1.17-13.3.52, cups-1:1.1.17-13.3.52.i386, cups-1:1.1.17-13.3.52.ia64 +6
- Red Hat Enterprise Linux WS version 4 cups-1:1.1.22-0.rc1.9.20.2.el4_6.6, cups-1:1.1.22-0.rc1.9.20.2.el4_6.6.i386, cups-1:1.1.22-0.rc1.9.20.2.el4_6.6.ia64 +6
Fixes 3 records
Priority MEDIUM 54
Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08282 · Published 2008-03-18 · Fixed CWE-119
Priority LOW 37
Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03873 · Published 2008-04-04 · Fixed CWE-190
Priority LOW 30
Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.
CVSS 2.0MEDIUM 5.8· Adjacent network · No auth · Interaction — · EPSS 0.02171 · Published 2008-04-04 · Fixed CWE-119
THREATIST.IORead the docs