CVE-2008-3639

Published: Oct 14, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.

Affected (77)

Products: Apple: Cups

Apple

1 product

Cups

Configuration A

77 vulnerable

Vulnerable Software	Affected Versions
Apple Cups	Up to 1.3.8
Apple Cups	Version 1.1.10-1
Apple Cups	Version 1.1.10
Apple Cups	Version 1.1.11
Apple Cups	Version 1.1.12
Apple Cups	Version 1.1.13
Apple Cups	Version 1.1.14
Apple Cups	Version 1.1.15
Apple Cups	Version 1.1.16
Apple Cups	Version 1.1.17
Apple Cups	Version 1.1.18
Apple Cups	Version 1.1.19
Apple Cups	Version 1.1.19 rc1
Apple Cups	Version 1.1.19 rc2
Apple Cups	Version 1.1.19 rc3
Apple Cups	Version 1.1.19 rc4
Apple Cups	Version 1.1.19 rc5
Apple Cups	Version 1.1.1
Apple Cups	Version 1.1.20
Apple Cups	Version 1.1.20 rc1
Apple Cups	Version 1.1.20 rc2
Apple Cups	Version 1.1.20 rc3
Apple Cups	Version 1.1.20 rc4
Apple Cups	Version 1.1.20 rc5
Apple Cups	Version 1.1.20 rc6
Apple Cups	Version 1.1.21
Apple Cups	Version 1.1.21 rc1
Apple Cups	Version 1.1.21 rc2
Apple Cups	Version 1.1.22
Apple Cups	Version 1.1.22 rc1
Apple Cups	Version 1.1.22 rc2
Apple Cups	Version 1.1.23
Apple Cups	Version 1.1.23 rc1
Apple Cups	Version 1.1.2
Apple Cups	Version 1.1.3
Apple Cups	Version 1.1.4
Apple Cups	Version 1.1.5-1
Apple Cups	Version 1.1.5-2
Apple Cups	Version 1.1.5
Apple Cups	Version 1.1.6-1
Apple Cups	Version 1.1.6-2
Apple Cups	Version 1.1.6-3
Apple Cups	Version 1.1.6
Apple Cups	Version 1.1.7
Apple Cups	Version 1.1.8
Apple Cups	Version 1.1.9-1
Apple Cups	Version 1.1.9
Apple Cups	Version 1.1
Apple Cups	Version 1.2.0
Apple Cups	Version 1.2.10
Apple Cups	Version 1.2.11
Apple Cups	Version 1.2.12
Apple Cups	Version 1.2.1
Apple Cups	Version 1.2.2
Apple Cups	Version 1.2.3
Apple Cups	Version 1.2.4
Apple Cups	Version 1.2.5
Apple Cups	Version 1.2.6
Apple Cups	Version 1.2.7
Apple Cups	Version 1.2.8
Apple Cups	Version 1.2.9
Apple Cups	Version 1.2 b1
Apple Cups	Version 1.2 b2
Apple Cups	Version 1.2 rc1
Apple Cups	Version 1.2 rc2
Apple Cups	Version 1.2 rc3
Apple Cups	Version 1.3.0
Apple Cups	Version 1.3.1
Apple Cups	Version 1.3.2
Apple Cups	Version 1.3.3
Apple Cups	Version 1.3.4
Apple Cups	Version 1.3.5
Apple Cups	Version 1.3.6
Apple Cups	Version 1.3.7
Apple Cups	Version 1.3 b1
Apple Cups	Version 1.3 rc1
Apple Cups	Version 1.3 rc2

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (56)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=753

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

Source: cve@mitre.org

http://secunia.com/advisories/32084

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32226

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32284

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32292

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32316

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32331

Source: cve@mitre.org

http://secunia.com/advisories/33085

Source: cve@mitre.org

http://secunia.com/advisories/33111

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm

Source: cve@mitre.org

http://www.cups.org/articles.php?L575

Source: cve@mitre.org

http://www.cups.org/str.php?L2918

Source: cve@mitre.org

Vendor Advisory

http://www.debian.org/security/2008/dsa-1656

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:211

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0937.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/31690

Source: cve@mitre.org

http://www.securitytracker.com/id?1021033

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2782

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3401

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1568

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45789

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11464

Source: cve@mitre.org

https://usn.ubuntu.com/656-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=753