CVE-2008-0047 Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote a...
HighCVSS 9.3
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cups | = 1.3.5 | No fix listed |
| debian/cups(Debian:12) | < 1.3.6-3 | 1.3.6-3 |
| debian/cups(Debian:13) | < 1.3.6-3 | 1.3.6-3 |
| debian/cups(Debian:14) | < 1.3.6-3 | 1.3.6-3 |
References
- docs.info.apple.com
- 20080318 Multiple Vendor CUPS CGI Heap Overflow Vulnerability third-party-advisory
- APPLE-SA-2008-03-18 patch vendor-advisory
- SUSE-SA:2008:015 vendor-advisory
- 29420 third-party-advisory vendor-advisory
- 29431 third-party-advisory vendor-advisory
- 29448 third-party-advisory vendor-advisory
- 29485 third-party-advisory vendor-advisory
- 29573 third-party-advisory vendor-advisory
- 29603 third-party-advisory vendor-advisory
- 29634 third-party-advisory vendor-advisory
- 29655 third-party-advisory vendor-advisory
- 29750 third-party-advisory vendor-advisory
- GLSA-200804-01 vendor-advisory
- DSA-1530 vendor-advisory
- MDVSA-2008:081 vendor-advisory
- RHSA-2008:0192 vendor-advisory
- 28307 vdb-entry
- 1019646 vdb-entry
- USN-598-1 vendor-advisory
- TA08-079A third-party-advisory us-government-resource
- ADV-2008-0921 vdb-entry vendor-advisory
- ADV-2008-0924 vdb-entry vendor-advisory
- oval:org.mitre.oval:def:10085 signature vdb-entry
- FEDORA-2008-2131 vendor-advisory
- FEDORA-2008-2897 vendor-advisory
- Debian Security Tracker CVE-2008-0047 vendor-advisory
- bugs.debian.org issue-tracking