Cups@1.3.2 Security Vulnerabilities and Issues — Cups@1.3.2 CVE List

Lucene search

AppleCups1.3.2

12 matches found

CVE•added 2009/04/23 5:30 p.m.•99 views

CVE-2009-0799

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers an out-of-bounds read.

4.3CVSS7.2AI score0.00676EPSS

CVE•added 2009/04/23 5:30 p.m.•94 views

CVE-2009-1180

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.

6.8CVSS7.8AI score0.0199EPSS

CVE•added 2009/04/23 5:30 p.m.•89 views

CVE-2009-1182

Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

7.5CVSS7.8AI score0.03762EPSS

CVE•added 2009/04/23 5:30 p.m.•88 views

CVE-2009-0163

Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filt...

6.8CVSS7.9AI score0.05696EPSS

CVE•added 2009/04/23 5:30 p.m.•82 views

CVE-2009-1179

Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file.

6.8CVSS7.8AI score0.05331EPSS

CVE•added 2009/04/23 5:30 p.m.•80 views

CVE-2009-0147

Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG...

4.3CVSS7.2AI score0.02257EPSS

CVE•added 2009/04/23 5:30 p.m.•79 views

CVE-2009-0800

Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allow remote attackers to execute arbitrary code via a crafted PDF file.

6.8CVSS7.7AI score0.05252EPSS

CVE•added 2009/04/23 5:30 p.m.•76 views

CVE-2009-0166

The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.

4.3CVSS7.2AI score0.05539EPSS

CVE•added 2009/04/24 3:30 p.m.•74 views

CVE-2009-0164

The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.

6.4CVSS7.2AI score0.04048EPSS

CVE•added 2009/04/23 5:30 p.m.•73 views

CVE-2009-0146

Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.

4.3CVSS7.3AI score0.0217EPSS

CVE•added 2009/04/23 5:30 p.m.•73 views

CVE-2009-1183

The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to cause a denial of service (infinite loop and hang) via a crafted PDF file.

4.3CVSS7.1AI score0.01192EPSS

CVE•added 2009/04/23 5:30 p.m.•66 views

CVE-2009-1181

4.3CVSS7.2AI score0.01381EPSS