CVE-2008-3640

Published: Oct 14, 2008Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.

Affected (77)

Products: Apple: Cups

Apple

1 product

Cups

Configuration A

77 vulnerable

Vulnerable Software	Affected Versions
Apple Cups	Up to 1.3.8
Apple Cups	Version 1.1.10-1
Apple Cups	Version 1.1.10
Apple Cups	Version 1.1.11
Apple Cups	Version 1.1.12
Apple Cups	Version 1.1.13
Apple Cups	Version 1.1.14
Apple Cups	Version 1.1.15
Apple Cups	Version 1.1.16
Apple Cups	Version 1.1.17
Apple Cups	Version 1.1.18
Apple Cups	Version 1.1.19
Apple Cups	Version 1.1.19 rc1
Apple Cups	Version 1.1.19 rc2
Apple Cups	Version 1.1.19 rc3
Apple Cups	Version 1.1.19 rc4
Apple Cups	Version 1.1.19 rc5
Apple Cups	Version 1.1.1
Apple Cups	Version 1.1.20
Apple Cups	Version 1.1.20 rc1
Apple Cups	Version 1.1.20 rc2
Apple Cups	Version 1.1.20 rc3
Apple Cups	Version 1.1.20 rc4
Apple Cups	Version 1.1.20 rc5
Apple Cups	Version 1.1.20 rc6
Apple Cups	Version 1.1.21
Apple Cups	Version 1.1.21 rc1
Apple Cups	Version 1.1.21 rc2
Apple Cups	Version 1.1.22
Apple Cups	Version 1.1.22 rc1
Apple Cups	Version 1.1.22 rc2
Apple Cups	Version 1.1.23
Apple Cups	Version 1.1.23 rc1
Apple Cups	Version 1.1.2
Apple Cups	Version 1.1.3
Apple Cups	Version 1.1.4
Apple Cups	Version 1.1.5-1
Apple Cups	Version 1.1.5-2
Apple Cups	Version 1.1.5
Apple Cups	Version 1.1.6-1
Apple Cups	Version 1.1.6-2
Apple Cups	Version 1.1.6-3
Apple Cups	Version 1.1.6
Apple Cups	Version 1.1.7
Apple Cups	Version 1.1.8
Apple Cups	Version 1.1.9-1
Apple Cups	Version 1.1.9
Apple Cups	Version 1.1
Apple Cups	Version 1.2.0
Apple Cups	Version 1.2.10
Apple Cups	Version 1.2.11
Apple Cups	Version 1.2.12
Apple Cups	Version 1.2.1
Apple Cups	Version 1.2.2
Apple Cups	Version 1.2.3
Apple Cups	Version 1.2.4
Apple Cups	Version 1.2.5
Apple Cups	Version 1.2.6
Apple Cups	Version 1.2.7
Apple Cups	Version 1.2.8
Apple Cups	Version 1.2.9
Apple Cups	Version 1.2 b1
Apple Cups	Version 1.2 b2
Apple Cups	Version 1.2 rc1
Apple Cups	Version 1.2 rc2
Apple Cups	Version 1.2 rc3
Apple Cups	Version 1.3.0
Apple Cups	Version 1.3.1
Apple Cups	Version 1.3.2
Apple Cups	Version 1.3.3
Apple Cups	Version 1.3.4
Apple Cups	Version 1.3.5
Apple Cups	Version 1.3.6
Apple Cups	Version 1.3.7
Apple Cups	Version 1.3 b1
Apple Cups	Version 1.3 rc1
Apple Cups	Version 1.3 rc2

Related CWEs

CWE-189

References (56)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=752

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

Source: cve@mitre.org

http://secunia.com/advisories/32084

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32226

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32284

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32292

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32316

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32331

Source: cve@mitre.org

http://secunia.com/advisories/33085

Source: cve@mitre.org

http://secunia.com/advisories/33111

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm

Source: cve@mitre.org

http://www.cups.org/articles.php?L575

Source: cve@mitre.org

http://www.cups.org/str.php?L2919

Source: cve@mitre.org

http://www.debian.org/security/2008/dsa-1656

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:211

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0937.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/31690

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1021034

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2782

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3401

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1568

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45790

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10266

Source: cve@mitre.org

https://usn.ubuntu.com/656-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=752