CVE-2008-3641

Published: Oct 10, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.

Affected (77)

Products: Apple: Cups

Apple

1 product

Cups

Configuration A

77 vulnerable

Vulnerable Software	Affected Versions
Apple Cups	Up to 1.3.8
Apple Cups	Version 1.1.10-1
Apple Cups	Version 1.1.10
Apple Cups	Version 1.1.11
Apple Cups	Version 1.1.12
Apple Cups	Version 1.1.13
Apple Cups	Version 1.1.14
Apple Cups	Version 1.1.15
Apple Cups	Version 1.1.16
Apple Cups	Version 1.1.17
Apple Cups	Version 1.1.18
Apple Cups	Version 1.1.19
Apple Cups	Version 1.1.19 rc1
Apple Cups	Version 1.1.19 rc2
Apple Cups	Version 1.1.19 rc3
Apple Cups	Version 1.1.19 rc4
Apple Cups	Version 1.1.19 rc5
Apple Cups	Version 1.1.1
Apple Cups	Version 1.1.20
Apple Cups	Version 1.1.20 rc1
Apple Cups	Version 1.1.20 rc2
Apple Cups	Version 1.1.20 rc3
Apple Cups	Version 1.1.20 rc4
Apple Cups	Version 1.1.20 rc5
Apple Cups	Version 1.1.20 rc6
Apple Cups	Version 1.1.21
Apple Cups	Version 1.1.21 rc1
Apple Cups	Version 1.1.21 rc2
Apple Cups	Version 1.1.22
Apple Cups	Version 1.1.22 rc1
Apple Cups	Version 1.1.22 rc2
Apple Cups	Version 1.1.23
Apple Cups	Version 1.1.23 rc1
Apple Cups	Version 1.1.2
Apple Cups	Version 1.1.3
Apple Cups	Version 1.1.4
Apple Cups	Version 1.1.5-1
Apple Cups	Version 1.1.5-2
Apple Cups	Version 1.1.5
Apple Cups	Version 1.1.6-1
Apple Cups	Version 1.1.6-2
Apple Cups	Version 1.1.6-3
Apple Cups	Version 1.1.6
Apple Cups	Version 1.1.7
Apple Cups	Version 1.1.8
Apple Cups	Version 1.1.9-1
Apple Cups	Version 1.1.9
Apple Cups	Version 1.1
Apple Cups	Version 1.2.0
Apple Cups	Version 1.2.10
Apple Cups	Version 1.2.11
Apple Cups	Version 1.2.12
Apple Cups	Version 1.2.1
Apple Cups	Version 1.2.2
Apple Cups	Version 1.2.3
Apple Cups	Version 1.2.4
Apple Cups	Version 1.2.5
Apple Cups	Version 1.2.6
Apple Cups	Version 1.2.7
Apple Cups	Version 1.2.8
Apple Cups	Version 1.2.9
Apple Cups	Version 1.2 b1
Apple Cups	Version 1.2 b2
Apple Cups	Version 1.2 rc1
Apple Cups	Version 1.2 rc2
Apple Cups	Version 1.2 rc3
Apple Cups	Version 1.3.0
Apple Cups	Version 1.3.1
Apple Cups	Version 1.3.2
Apple Cups	Version 1.3.3
Apple Cups	Version 1.3.4
Apple Cups	Version 1.3.5
Apple Cups	Version 1.3.6
Apple Cups	Version 1.3.7
Apple Cups	Version 1.3 b1
Apple Cups	Version 1.3 rc1
Apple Cups	Version 1.3 rc2

Related CWEs

CWE-399

References (72)

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Source: cve@mitre.org

Vendor Advisory

http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html

Source: cve@mitre.org

http://secunia.com/advisories/32084

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32222

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32226

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32284

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32292

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32316

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/32331

Source: cve@mitre.org

http://secunia.com/advisories/33085

Source: cve@mitre.org

http://secunia.com/advisories/33111

Source: cve@mitre.org

http://secunia.com/advisories/33568

Source: cve@mitre.org

http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1

Source: cve@mitre.org

http://support.apple.com/kb/HT3216

Source: cve@mitre.org

Vendor Advisory

http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm

Source: cve@mitre.org

http://www.cups.org/articles.php?L575

Source: cve@mitre.org

http://www.cups.org/str.php?L2911

Source: cve@mitre.org

Exploit

http://www.debian.org/security/2008/dsa-1656

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:211

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-0937.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/497221/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/31681

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/31688

Source: cve@mitre.org

http://www.securitytracker.com/id?1021031

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2780

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2782

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3401

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2009/1568

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-08-067

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/45779

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9666

Source: cve@mitre.org

https://usn.ubuntu.com/656-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html