CVE-2008-0882

Published: Feb 21, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer. NOTE: some of these details are obtained from third party information.

Affected (1)

Products: Cups: Cups

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cups Cups	Version 1.3.5

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (54)

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html

Source: cve@mitre.org

http://secunia.com/advisories/28994

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29067

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29120

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/29132

Source: cve@mitre.org

http://secunia.com/advisories/29251

Source: cve@mitre.org

http://secunia.com/advisories/29420

Source: cve@mitre.org

http://secunia.com/advisories/29485

Source: cve@mitre.org

http://secunia.com/advisories/29603

Source: cve@mitre.org

http://secunia.com/advisories/29634

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200804-01.xml

Source: cve@mitre.org

http://www.cups.org/str.php?L2656

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1530

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:050

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:051

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0157.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/27906

Source: cve@mitre.org

http://www.securitytracker.com/id?1019473

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-598-1

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0623

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=433758

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9625

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00792.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00832.html

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307562

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2008-03/msg00000.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28994

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/29067

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/29120

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/29132

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29251

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29420

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29485

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29603

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29634

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200804-01.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cups.org/str.php?L2656

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2008/dsa-1530

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:050

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:051

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-0157.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/27906

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1019473

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-598-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0623

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0924/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=433758

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9625

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00792.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2008-February/msg00832.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.