Lucene search

MitreCVE-2009-0163

HistoryApr 23, 2009 - 5:30 p.m.

CVE-2009-0163

2009-04-2317:30:01

CWE-189

mitre

web.nvd.nist.gov

cups

integer overflow

denial of service

arbitrary code execution

tiff image

security vulnerability

remote attackers

nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

High

EPSS

0.018

Percentile

88.3%

JSON

Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.

Affected configurations

Nvd

Node

applecupsRange≤1.3.9

applecupsMatch1.1

applecupsMatch1.1.1

applecupsMatch1.1.2

applecupsMatch1.1.3

applecupsMatch1.1.4

applecupsMatch1.1.5

applecupsMatch1.1.5-1

applecupsMatch1.1.5-2

applecupsMatch1.1.6

applecupsMatch1.1.6-1

applecupsMatch1.1.6-2

applecupsMatch1.1.6-3

applecupsMatch1.1.7

applecupsMatch1.1.8

applecupsMatch1.1.9

applecupsMatch1.1.9-1

applecupsMatch1.1.10

applecupsMatch1.1.10-1

applecupsMatch1.1.11

applecupsMatch1.1.12

applecupsMatch1.1.13

applecupsMatch1.1.14

applecupsMatch1.1.15

applecupsMatch1.1.16

applecupsMatch1.1.17

applecupsMatch1.1.18

applecupsMatch1.1.19

applecupsMatch1.1.19rc1

applecupsMatch1.1.19rc2

applecupsMatch1.1.19rc3

applecupsMatch1.1.19rc4

applecupsMatch1.1.19rc5

applecupsMatch1.1.20

applecupsMatch1.1.20rc1

applecupsMatch1.1.20rc2

applecupsMatch1.1.20rc3

applecupsMatch1.1.20rc4

applecupsMatch1.1.20rc5

applecupsMatch1.1.20rc6

applecupsMatch1.1.21

applecupsMatch1.1.21rc1

applecupsMatch1.1.21rc2

applecupsMatch1.1.22

applecupsMatch1.1.22rc1

applecupsMatch1.1.22rc2

applecupsMatch1.1.23

applecupsMatch1.1.23rc1

applecupsMatch1.2b1

applecupsMatch1.2b2

applecupsMatch1.2rc1

applecupsMatch1.2rc2

applecupsMatch1.2rc3

applecupsMatch1.2.0

applecupsMatch1.2.1

applecupsMatch1.2.2

applecupsMatch1.2.3

applecupsMatch1.2.4

applecupsMatch1.2.5

applecupsMatch1.2.6

applecupsMatch1.2.7

applecupsMatch1.2.8

applecupsMatch1.2.9

applecupsMatch1.2.10

applecupsMatch1.2.11

applecupsMatch1.2.12

applecupsMatch1.3b1

applecupsMatch1.3rc1

applecupsMatch1.3rc2

applecupsMatch1.3.0

applecupsMatch1.3.1

applecupsMatch1.3.2

applecupsMatch1.3.3

applecupsMatch1.3.4

applecupsMatch1.3.5

applecupsMatch1.3.6

applecupsMatch1.3.7

applecupsMatch1.3.8

VendorProductVersionCPE
applecups1.1.19cpe:/a:apple:cups:1.1.19:rc5::
applecups1.1.4cpe:/a:apple:cups:1.1.4:::
applecups1.3cpe:/a:apple:cups:1.3:rc1::
applecups1.1.1cpe:/a:apple:cups:1.1.1:::
applecups1.1.7cpe:/a:apple:cups:1.1.7:::
applecups1.1.6-1cpe:/a:apple:cups:1.1.6-1:::
applecups1.1.15cpe:/a:apple:cups:1.1.15:::
applecups1.3cpe:/a:apple:cups:1.3:rc2::
applecups1.1.22cpe:/a:apple:cups:1.1.22:rc2::
applecups1.1.23cpe:/a:apple:cups:1.1.23:rc1::

Vendor	Product	Version	CPE
apple	cups	1.1.19	cpe:/a:apple:cups:1.1.19:rc5::
apple	cups	1.1.4	cpe:/a:apple:cups:1.1.4:::
apple	cups	1.3	cpe:/a:apple:cups:1.3:rc1::
apple	cups	1.1.1	cpe:/a:apple:cups:1.1.1:::
apple	cups	1.1.7	cpe:/a:apple:cups:1.1.7:::
apple	cups	1.1.6-1	cpe:/a:apple:cups:1.1.6-1:::
apple	cups	1.1.15	cpe:/a:apple:cups:1.1.15:::
apple	cups	1.3	cpe:/a:apple:cups:1.3:rc2::
apple	cups	1.1.22	cpe:/a:apple:cups:1.1.22:rc2::
apple	cups	1.1.23	cpe:/a:apple:cups:1.1.23:rc1::