CVE-2008-3641
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.92 High
EPSS
Percentile
99.0%
The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.
Affected configurations
References
lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html
lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
secunia.com/advisories/32084
secunia.com/advisories/32222
secunia.com/advisories/32226
secunia.com/advisories/32284
secunia.com/advisories/32292
secunia.com/advisories/32316
secunia.com/advisories/32331
secunia.com/advisories/33085
secunia.com/advisories/33111
secunia.com/advisories/33568
sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1
support.apple.com/kb/HT3216
support.avaya.com/elmodocs2/security/ASA-2008-470.htm
www.cups.org/articles.php?L575
www.cups.org/str.php?L2911
www.debian.org/security/2008/dsa-1656
www.gentoo.org/security/en/glsa/glsa-200812-11.xml
www.mandriva.com/security/advisories?name=MDVSA-2008:211
www.redhat.com/support/errata/RHSA-2008-0937.html
www.securityfocus.com/archive/1/497221/100/0/threaded
www.securityfocus.com/bid/31681
www.securityfocus.com/bid/31688
www.securitytracker.com/id?1021031
www.vupen.com/english/advisories/2008/2780
www.vupen.com/english/advisories/2008/2782
www.vupen.com/english/advisories/2008/3401
www.vupen.com/english/advisories/2009/1568
www.zerodayinitiative.com/advisories/ZDI-08-067
exchange.xforce.ibmcloud.com/vulnerabilities/45779
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9666
usn.ubuntu.com/656-1/
www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html
www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html
Related
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.4 High
AI Score
Confidence
Low
0.92 High
EPSS
Percentile
99.0%