CUPS: texttops integer overflow

Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow...

CentOS 3 / 4 / 5 : cups (CESA-2008:0937)

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNI...

Mac OS X Multiple Vulnerabilities (Security Update 2008-007)

The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have the security update 2008-007 applied. This security update contains fixes for the following products : - Apache - Certificates - ClamAV - ColorSync - CUPS - Finder - launchd - libxslt - MySQL Server - Networking - PH...

CUPS < 1.3.9 Multiple Vulnerabilities

According to its banner, the version of CUPS installed on the remote host is earlier than 1.3.9. Such versions are affected by several issues : - The HP-GL/2 filter does not adequately check the ranges on the pen width and pen color opcodes that allows an attacker to overwrite memory addresses wi...

RHEL 3 / 4 / 5 : cups (RHSA-2008:0937)

Updated cups packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNI...

cups security update

1.2.4-11.18:.2 - Applied patch to fix CVE-2008-3639 STR 2918, bug 464721. - Applied patch to fix CVE-2008-3640 STR 2919, bug 464721. - Applied patch to fix CVE-2008-3641 STR 2911, bug 464721...

cups -- multiple vulnerabilities

The release note of cups 1.3.9 reports: It contains the following fixes: SECURITY: The HP-GL/2 filter did not range check pen numbers STR 2911 SECURITY: The SGI image file reader did not range check 16-bit run lengths STR 2918 SECURITY: The text filter did not range check cpi, lpi, or column valu...

CUPS 1.3.7 - 'HP-GL/2' Filter Remote Code Execution

source: https://www.securityfocus.com/bid/31688/info CUPS is prone to a remote code-execution vulnerability caused by an error in the 'HP-GL/2 filter. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cau...

CUPS 1.3.7 - HP-GL2 Filter Remote Code Execution

CUPS 1.3.7 - HP-GL2 Filter Remote Code Execution source: https://www.securityfocus.com/bid/31688/info CUPS is prone to a remote code-execution vulnerability caused by an error in the 'HP-GL/2 filter. Attackers can exploit this issue to execute arbitrary code within the context of the affected...

Apple CUPS HP-GL/2 Filter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple CUPS. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Hewlett-Packard Graphics Language filter. Inadequate bounds checking on the pen width and p...

openSUSE 10 Security Update : cups (cups-5652)

Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server CVE-2008-3639, CVE-2008-3640, CVE-2008-3641. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SuSE 10 Security Update : CUPS (ZYPP Patch Number 5653)

Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server. CVE-2008-3639 / CVE-2008-3640 / CVE-2008-3641 %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE 10 Security Update : bluez-audio (bluez-audio-5441)

Missing length checks in bluez-libs could cause a buffer overflow in Bluetooth applications. Malicious bluetooth devices could potentially exploit that to execute arbitrary code CVE-2008-2374. Note: The source code of each application that uses vulnerable functions of bluez-libs needs to be adapt...

Gentoo Security Advisory GLSA 200711-16 (cups)

The remote host is missing updates announced in advisory GLSA 200711-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200501-30 (CUPS)

The remote host is missing updates announced in advisory GLSA 200501-30. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200512-08 (xpdf, gpdf, poppler,cups)

The remote host is missing updates announced in advisory GLSA 200512-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200703-28 (cups)

The remote host is missing updates announced in advisory GLSA 200703-28. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200804-01 (cups)

The remote host is missing updates announced in advisory GLSA 200804-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200804-23 (cups)

The remote host is missing updates announced in advisory GLSA 200804-23. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Gentoo Security Advisory GLSA 200804-23 (cups)

The remote host is missing updates announced in advisory GLSA 200804-23. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...