CVE-2008-1722

Published: Apr 10, 2008Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image.

Affected (1)

Products: Cups: Cups

Cups

1 product

Cups

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cups Cups	Version 1.3

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (50)

http://secunia.com/advisories/29809

Source: secalert@redhat.com

http://secunia.com/advisories/29902

Source: secalert@redhat.com

http://secunia.com/advisories/30078

Source: secalert@redhat.com

http://secunia.com/advisories/30190

Source: secalert@redhat.com

http://secunia.com/advisories/30553

Source: secalert@redhat.com

http://secunia.com/advisories/30717

Source: secalert@redhat.com

http://secunia.com/advisories/31324

Source: secalert@redhat.com

http://secunia.com/advisories/32292

Source: secalert@redhat.com

http://www.cups.org/str.php?L2790

Source: secalert@redhat.com

Patch

http://www.debian.org/security/2008/dsa-1625

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200804-23.xml

Source: secalert@redhat.com

http://www.kb.cert.org/vuls/id/218395

Source: secalert@redhat.com

US Government Resource

http://www.mandriva.com/security/advisories?name=MDVSA-2008:170

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2008_13_sr.html

Source: secalert@redhat.com

http://www.osvdb.org/44398

Source: secalert@redhat.com

http://www.securityfocus.com/bid/28781

Source: secalert@redhat.com

http://www.securitytracker.com/id?1019854

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-606-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/1226/references

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/41832

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8768

Source: secalert@redhat.com

https://rhn.redhat.com/errata/RHSA-2008-0498.html

Source: secalert@redhat.com

https://usn.ubuntu.com/656-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00068.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00081.html

Source: secalert@redhat.com

http://secunia.com/advisories/29809