CVE-2007-4351

Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service crash via a crafted 1 textWithLanguage or 2 nameWithLanguage Internet Printing Protocol IPP tag, leading to a stack-based buffer overflow...

CVE-2007-4351

Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service crash via a crafted 1 textWithLanguage or 2 nameWithLanguage Internet Printing Protocol IPP tag, leading to a stack-based buffer overflow...

CVE-2007-4351

CVE-2007-4351 concerns the Common UNIX Printing System (CUPS) before patch era, in which an off-by-one/IPP tag handling flaw in the ippReadIO path could be exploited by remote attackers to crash cupsd via crafted IPP requests. The issue affects CUPS 1.3.3 and is documented across multiple advisor...

CVE-2007-4351

Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service crash via a crafted 1 textWithLanguage or 2 nameWithLanguage Internet Printing Protocol IPP tag, leading to a stack-based buffer overflow...

Common UNIX Printing System IPP Tags Memory Corruption Vulnerability

The Common UNIX Printing System CUPS versions 1.3.3 and prior contain a vulnerability that can allow an unauthenticated, remote attacker to create a denial of service DoS condition or execute arbitrary code with the privileges of the user. The vulnerability exists in the ippReadIO function when...

cups boundary error

Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service crash via a crafted 1 textWithLanguage or 2 nameWithLanguage Internet Printing Protocol IPP tag, leading to a stack-based buffer overflow...

Secunia Research: CUPS IPP Tags Memory Corruption Vulnerability

====================================================================== Secunia Research 31/10/2007 - CUPS IPP Tags Memory Corruption Vulnerability - ====================================================================== Table of Contents Affected...

openSUSE 10 Security Update : cups (cups-2527)

This update fixes a vulnerability which occurs while processing a special PDF file. This bug can lead to a denial-of-service condition, or a memory corruption, or to arbitrary code execution. CVE-2007-0104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package check...

openSUSE 10 Security Update : cups (cups-3136)

By keeping a partially negotiated SSL connection open an attacker could prevent the cups server from accepting other requests CVE-2007-0720. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE 10 Security Update : cups (cups-3715)

The previous cups update CVE-2007-0720 was incomplete and could lead to cupsd crashing. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update cups-3715. The text description of this plugin is C SUSE...

openSUSE 10 Security Update : cups (cups-4044)

A buffer overflow in the xpdf code contained in cups could be exploited by attackers to potentially execute arbitrary code CVE-2007-3387. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Mandrake Linux Security Advisory : cups (MDKSA-2007:165)

Maurycy Prodeus found an integer overflow vulnerability in the way various PDF viewers processed PDF files. An attacker could create a malicious PDF file that could cause cups to crash and possibly execute arbitrary code open a user opening the file. This update provides packages which are patche...

Fedora Core 6 : cups-1.2.12-4.fc6 (2007-644)

This update fixes a security issue concerning PDF handling. It also fixes printing speed with USB printers, and includes a fix for the LSPP support. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted t...

[SECURITY] Fedora 7 Update: cups-1.2.12-4.fc7

The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

RHEL 3 / 4 / 5 : cups (RHSA-2007:0720)

Updated CUPS packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer...

CentOS 3 / 4 / 5 : cups (CESA-2007:0720)

Updated CUPS packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer...

cups security update

CentOS Errata and Security Advisory CESA-2007:0720 Updated CUPS packages that fix a security issue in PDF handling are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX...

Important: cups security update

1.1.22-0.rc1.9.20.2 - Better patch for CVE-2007-3387 bug 248220. 1.1.22-0.rc1.9.20.1 - Applied patch to fix CVE-2007-3387 bug 248220...

CVE-2007-4045

The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation...

CVE-2007-4045

The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation...