CVE-2008-5286

Published: Dec 1, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow.

Affected (54)

Products: Apple: Cups

1 product

Configuration A

54 vulnerable

Vulnerable Software	Affected Versions
Apple Cups	Version 1.1.17
Apple Cups	Version 1.1.18
Apple Cups	Version 1.1.19
Apple Cups	Version 1.1.19 rc1
Apple Cups	Version 1.1.19 rc2
Apple Cups	Version 1.1.19 rc3
Apple Cups	Version 1.1.19 rc4
Apple Cups	Version 1.1.19 rc5
Apple Cups	Version 1.1.20
Apple Cups	Version 1.1.20 rc1
Apple Cups	Version 1.1.20 rc2
Apple Cups	Version 1.1.20 rc3
Apple Cups	Version 1.1.20 rc4
Apple Cups	Version 1.1.20 rc5
Apple Cups	Version 1.1.20 rc6
Apple Cups	Version 1.1.21
Apple Cups	Version 1.1.21 rc1
Apple Cups	Version 1.1.21 rc2
Apple Cups	Version 1.1.22
Apple Cups	Version 1.1.22 rc1
Apple Cups	Version 1.1.22 rc2
Apple Cups	Version 1.1.23
Apple Cups	Version 1.1.23 rc1
Apple Cups	Version 1.2.0
Apple Cups	Version 1.2.10
Apple Cups	Version 1.2.11
Apple Cups	Version 1.2.12
Apple Cups	Version 1.2.1
Apple Cups	Version 1.2.2
Apple Cups	Version 1.2.3
Apple Cups	Version 1.2.4
Apple Cups	Version 1.2.5
Apple Cups	Version 1.2.6
Apple Cups	Version 1.2.7
Apple Cups	Version 1.2.8
Apple Cups	Version 1.2.9
Apple Cups	Version 1.2 b1
Apple Cups	Version 1.2 b2
Apple Cups	Version 1.2 rc1
Apple Cups	Version 1.2 rc2
Apple Cups	Version 1.2 rc3
Apple Cups	Version 1.3.0
Apple Cups	Version 1.3.1
Apple Cups	Version 1.3.2
Apple Cups	Version 1.3.3
Apple Cups	Version 1.3.4
Apple Cups	Version 1.3.5
Apple Cups	Version 1.3.6
Apple Cups	Version 1.3.7
Apple Cups	Version 1.3.8
Apple Cups	Version 1.3.9
Apple Cups	Version 1.3 b1
Apple Cups	Version 1.3 rc1
Apple Cups	Version 1.3 rc2

Related CWEs

References (38)

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html

Source: cve@mitre.org

http://secunia.com/advisories/32962

Source: cve@mitre.org

http://secunia.com/advisories/33101

Source: cve@mitre.org

http://secunia.com/advisories/33111

Source: cve@mitre.org

http://secunia.com/advisories/33568

Source: cve@mitre.org

http://svn.easysw.com/public/cups/trunk/CHANGES-1.3.txt

Source: cve@mitre.org

http://www.cups.org/str.php?L2974

Source: cve@mitre.org

PatchVendor Advisory

http://www.debian.org/security/2008/dsa-1677

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200812-01.xml

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:028

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:029

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2008/12/01/1

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2008-1028.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/32518

Source: cve@mitre.org

Patch

http://www.securitytracker.com/id?1021298

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/3315

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/46933

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10058

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/32962

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33101

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33111

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33568

Source: af854a3a-2127-422b-91ae-364da2661108

http://svn.easysw.com/public/cups/trunk/CHANGES-1.3.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.cups.org/str.php?L2974

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.debian.org/security/2008/dsa-1677

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200812-01.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:028

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:029

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2008/12/01/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.redhat.com/support/errata/RHSA-2008-1028.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/32518

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.securitytracker.com/id?1021298

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/3315

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/46933

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10058

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.