cups: buffer overflows [LWN.net]

Package(s):

cups

CVE #(s):

CVE-2008-0053 CVE-2008-1373

Created:

April 1, 2008

Updated:

October 16, 2008

Description:

Two overflows were discovered in the HP-GL/2-to-PostScript filter. An attacker could create a malicious HP-GL/2 file that could possibly execute arbitrary code as the "lp" user if the file is printed. A buffer overflow flaw was discovered in the GIF decoding routines used by CUPS image converting filters "imagetops" and "imagetoraster". An attacker could create a malicious GIF file that could possibly execute arbitrary code as the "lp" user if the file was printed.

Alerts:

Fedora	FEDORA-2008-8844	2008-10-16
Fedora	FEDORA-2008-8801	2008-10-16
Debian	DSA-1625-1	2008-08-01
Fedora	FEDORA-2008-2131	2008-04-08
Fedora	FEDORA-2008-2897	2008-04-08
rPath	rPSA-2008-0136-1	2008-04-04
SuSE	SUSE-SA:2008:020	2008-04-04
Ubuntu	USN-598-1	2008-04-02
Slackware	SSA:2008-094-01	2008-04-03
Mandriva	MDVSA-2008:081	2007-04-02
Gentoo	200804-01	2008-04-01
Red Hat	RHSA-2008:0206-01	2008-04-01
Red Hat	RHSA-2008:0192-01	2008-04-01

(Log in to post comments)