Fedora 8 : cups-1.3.7-2.fc8 (2008-3586)

Fri May 9 2008 Tim Waugh 1:1.3.7-2 - Applied patch to fix CVE-2008-1722 integer overflow in image filter, bug 441692, STR 2790. - Fri May 2 2008 Tim Waugh - Include the hostname in the charset error part of bug 441719. - Thu Apr 10 2008 Tim Waugh - Log an error when a client requests a charset...

Ubuntu 6.06 LTS / 7.04 / 7.10 : cupsys vulnerability (USN-606-1)

Thomas Pollet discovered that CUPS did not properly validate the size of PNG images. A local attacker, and a remote attacker if printer sharing is enabled, could send a crafted file and cause a denial of service or possibly execute arbitrary code as the non-root user in Ubuntu 6.06 LTS and 7.04. ...

[USN-606-1] CUPS vulnerability

=========================================================== Ubuntu Security Notice USN-606-1 May 05, 2008 cupsys vulnerability CVE-2008-1722 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 7.04 Ubuntu 7.10...

CVE-2008-1722

CVE-2008-1722 is an integer overflow in CUPS PNG decoding filters (imagetops/imagetoraster) that leads to a heap buffer overflow, allowing memory corruption and potential code execution or crashes when processing a crafted PNG. Public advisories for multiple distros (Red Hat, Oracle Linux, Ubuntu...

CVE-2007-1722

CVE-2007-1722 describes a buffer overflow in the DownloadCertificateExt function of SignKorea SKCommAX ActiveX control module versions 7.2.0.2 and 3280 6.6.0.1. An attacker can remotely trigger execution of arbitrary code by passing a long pszUserID argument, enabling full compromise of the host ...

CVE-2006-1722

CVE-2006-1722 affects ShopXS 4.0, where the cross-site scripting flaw is in suche.htm when processing the Suchstring1 (search) parameter. The vulnerability allows remote injection of arbitrary web script/HTML. Notable technical details in provided docs identify the vulnerable page and parameter, ...

CVE-2005-1722

CVE-2005-1722 : Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions. Documented impact is local privilege escalation to root; root cause and exact exploit details are not provided in the suppli...