CVE-2008-1373

Published: Apr 4, 2008Modified: Apr 23, 2026

5.8

Vector

AV:A/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 6.5 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.

Affected (1)

Products: Easy Software Products: Cups

Easy Software Products

1 product

Cups

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Easy Software Products Cups	Version 1.3.6

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (52)

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html

Source: secalert@redhat.com

http://secunia.com/advisories/29573

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29603

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29630

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29634

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29655

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29659

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29661

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/29750

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/31324

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200804-01.xml

Source: secalert@redhat.com

http://wiki.rpath.com/Advisories:rPSA-2008-0136

Source: secalert@redhat.com

http://www.cups.org/str.php?L2765

Source: secalert@redhat.com

ExploitPatch

http://www.debian.org/security/2008/dsa-1625

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:081

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0192.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2008-0206.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/490486/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/28544

Source: secalert@redhat.com

http://www.securitytracker.com/id?1019739

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-598-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1059/references

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/41587

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11479

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00091.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html