Lucene search

K
cve[email protected]CVE-2008-0047
HistoryMar 18, 2008 - 11:44 p.m.

CVE-2008-0047

2008-03-1823:44:00
CWE-119
web.nvd.nist.gov
42
cve-2008-0047
cups
buffer overflow
remote code execution
printer sharing
nvd

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.855 High

EPSS

Percentile

98.5%

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.

CPENameOperatorVersion
cups:cupscupseq1.3.5

References

7.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.855 High

EPSS

Percentile

98.5%