CUPS vulnerability

2009-04-1600:00:00

ubuntu.com

7.2 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.018 Low

EPSS

Percentile

88.1%

JSON

Releases

Ubuntu 8.10
Ubuntu 8.04
Ubuntu 7.10
Ubuntu 6.06

Packages

cups -
cupsys -

Details

It was discovered that CUPS did not properly check the height of TIFF images.
If a user or automated system were tricked into opening a crafted TIFF image
file, a remote attacker could cause a denial of service or possibly execute
arbitrary code with user privileges. In Ubuntu 7.10, 8.04 LTS, and 8.10,
attackers would be isolated by the AppArmor CUPS profile.

OSVersionArchitecturePackageVersionFilename
Ubuntu8.10noarchlibcupsimage2< 1.3.9-2ubuntu9.1UNKNOWN
Ubuntu8.10noarchcups< 1.3.9-2ubuntu9.1UNKNOWN
Ubuntu8.10noarchcups< bsd-1.3.9-2ubuntu9.1UNKNOWN
Ubuntu8.10noarchcups< client-1.3.9-2ubuntu9.1UNKNOWN
Ubuntu8.10noarchcups< dbg-1.3.9-2ubuntu9.1UNKNOWN
Ubuntu8.10noarchlibcups2< 1.3.9-2ubuntu9.1UNKNOWN
Ubuntu8.10noarchlibcups2< dev-1.3.9-2ubuntu9.1UNKNOWN
Ubuntu8.10noarchlibcupsimage2< dev-1.3.9-2ubuntu9.1UNKNOWN
Ubuntu8.04noarchlibcupsimage2< 1.3.7-1ubuntu3.4UNKNOWN
Ubuntu8.04noarchcupsys< 1.3.7-1ubuntu3.4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Ubuntu	8.10	noarch	libcupsimage2	< 1.3.9-2ubuntu9.1	UNKNOWN
Ubuntu	8.10	noarch	cups	< 1.3.9-2ubuntu9.1	UNKNOWN
Ubuntu	8.10	noarch	cups	< bsd-1.3.9-2ubuntu9.1	UNKNOWN
Ubuntu	8.10	noarch	cups	< client-1.3.9-2ubuntu9.1	UNKNOWN
Ubuntu	8.10	noarch	cups	< dbg-1.3.9-2ubuntu9.1	UNKNOWN
Ubuntu	8.10	noarch	libcups2	< 1.3.9-2ubuntu9.1	UNKNOWN
Ubuntu	8.10	noarch	libcups2	< dev-1.3.9-2ubuntu9.1	UNKNOWN
Ubuntu	8.10	noarch	libcupsimage2	< dev-1.3.9-2ubuntu9.1	UNKNOWN
Ubuntu	8.04	noarch	libcupsimage2	< 1.3.7-1ubuntu3.4	UNKNOWN
Ubuntu	8.04	noarch	cupsys	< 1.3.7-1ubuntu3.4	UNKNOWN