CVE-2008-0882

2008-02-2100:00:00

ubuntu.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.123 Low

EPSS

Percentile

95.4%

JSON

Double free vulnerability in the process_browse_data function in CUPS 1.3.5
allows remote attackers to cause a denial of service (daemon crash) and
possibly execute arbitrary code via crafted UDP Browse packets to the cupsd
port (631/udp), related to an unspecified manipulation of a remote printer.
NOTE: some of these details are obtained from third party information.

Bugs

<http://bugs.debian.org/467653>

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchcupsys< 1.2.2-0ubuntu0.6.06.8UNKNOWN
ubuntu6.10noarchcupsys< 1.2.4-2ubuntu3.3UNKNOWN
ubuntu7.04noarchcupsys< 1.2.8-0ubuntu8.3UNKNOWN
ubuntu7.10noarchcupsys< 1.3.2-1ubuntu7.6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	cupsys	< 1.2.2-0ubuntu0.6.06.8	UNKNOWN
ubuntu	6.10	noarch	cupsys	< 1.2.4-2ubuntu3.3	UNKNOWN
ubuntu	7.04	noarch	cupsys	< 1.2.8-0ubuntu8.3	UNKNOWN
ubuntu	7.10	noarch	cupsys	< 1.3.2-1ubuntu7.6	UNKNOWN