Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2008-1374
HistoryApr 04, 2008 - 12:44 a.m.

CVE-2008-1374

2008-04-0400:44:00
CWE-190
redhat
web.nvd.nist.gov
40
4
cups
pdftops
rhel
integer overflow
remote code execution
pdf
incomplete fix

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.07

Percentile

94.1%

JSON

Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an incomplete fix for CVE-2004-0888.

Affected configurations

Nvd
Node
applecupsRange≤1.3.11
VendorProductVersionCPE
applecups*cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*

Social References

More

Related

ubuntucve 4
prion 1
cvelist 4
debiancve 4
nvd 4
redhat 10
centos 2
nessus 44
openvas 30
oraclelinux 2
debian 6
ubuntu 2
osv 3
gentoo 4
securityvulns 4
cve 3
freebsd 1
suse 3
ubuntucve
ubuntucve
CVE-2008-1374
2008-04-04 00:00:00
CVE-2004-0889
2005-01-27 00:00:00
CVE-2005-0206
2005-04-27 00:00:00
prion
prion
Integer overflow
2008-04-04 00:44:00
cvelist
cvelist
CVE-2008-1374
2008-04-04 00:00:00
CVE-2004-0889
2004-10-26 04:00:00
CVE-2004-0888
2004-10-26 04:00:00
debiancve
debiancve
CVE-2008-1374
2008-04-04 00:44:00
CVE-2004-0889
2005-01-27 05:00:00
CVE-2005-0206
2005-04-27 04:00:00
nvd
nvd
CVE-2008-1374
2008-04-04 00:44:00
CVE-2005-0206
2005-04-27 04:00:00
CVE-2004-0888
2005-01-27 05:00:00
redhat
redhat
(RHSA-2008:0206) Moderate: cups security update
2008-04-01 00:00:00
(RHSA-2004:592) xpdf security update
2004-10-27 00:00:00
(RHSA-2005:132) cups security update
2005-02-18 00:00:00
centos
centos
cups security update
2008-04-01 17:06:38
tetex security update
2005-04-01 21:29:55
nessus
nessus
Scientific Linux Security Update : cups on SL3.x, SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 3 / 4 : cups (RHSA-2008:0206)
2008-04-04 00:00:00
CentOS 3 / 4 : cups (CESA-2008:0206)
2008-04-04 00:00:00
openvas
openvas
CentOS Update for cups CESA-2008:0206 centos3 i386
2009-02-27 00:00:00
CentOS Update for cups CESA-2008:0206 centos3 x86_64
2009-02-27 00:00:00
RedHat Update for cups RHSA-2008:0206-01
2009-03-06 00:00:00
oraclelinux
oraclelinux
cups security update
2008-04-01 00:00:00
kdegraphics security update
2006-11-30 00:00:00
debian
debian
[SECURITY] [DSA 573-1] New cupsys packages fix arbitrary code execution
2004-10-21 14:18:22
[SECURITY] [DSA 599-1] New tetex-bin packages fix arbitrary code execution
2004-11-25 14:48:24
[SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution
2004-11-02 15:35:44
ubuntu
ubuntu
tetex-bin vulnerabilities
2004-10-28 00:00:00
xpdf vulnerabilities
2004-11-02 00:00:00
osv
osv
tetex-bin - integer overflows
2004-11-25 00:00:00
xpdf - integer overflows
2004-11-02 00:00:00
cupsys - integer overflows
2004-10-21 00:00:00
gentoo
gentoo
pdftohtml: Vulnerabilities in included Xpdf
2004-11-23 00:00:00
Xpdf, CUPS: Multiple integer overflows
2004-10-21 00:00:00
GPdf, KPDF, KOffice: Vulnerabilities in included xpdf
2004-10-28 00:00:00
securityvulns
securityvulns
MDKSA-2004:114 - Updated gpdf packages fix DoS vulnerability
2004-10-22 00:00:00
MDKSA-2004:116 - Updated cups packages fix DoS vulnerabilities
2004-10-22 00:00:00
[KDE security advisory] Multiple integer overflows in kpdf
2004-10-22 00:00:00
cve
cve
CVE-2004-0888
2005-01-27 05:00:00
CVE-2005-0206
2005-04-27 04:00:00
CVE-2004-0889
2005-01-27 05:00:00
freebsd
freebsd
xpdf -- integer overflow vulnerabilities
2004-10-21 00:00:00
suse
suse
remote system compromise in xpdf, gpdf, kdegraphics3-pdf, pdftohtml, cups
2004-10-26 10:45:14
local privilege escalation in libtiff
2004-10-22 14:52:41
potential remote buffer overflow in samba
2004-11-15 22:07:05

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.07

Percentile

94.1%

JSON
Related for CVE-2008-1374
ubuntucve4prion1cvelist4debiancve4nvd4redhat10centos2nessus44openvas30oraclelinux2debian6ubuntu2osv3gentoo4securityvulns4cve3freebsd1suse3