CVE-2008-5286

2008-12-0100:00:00

ubuntu.com

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.864 High

EPSS

Percentile

98.6%

JSON

Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through
1.3.9 allows remote attackers to execute arbitrary code via a PNG image
with a large height value, which bypasses a validation check and triggers a
buffer overflow.

OSVersionArchitecturePackageVersionFilename
ubuntu8.10noarchcups< 1.3.9-2ubuntu6.1UNKNOWN
ubuntu6.06noarchcupsys< 1.2.2-0ubuntu0.6.06.12UNKNOWN
ubuntu7.10noarchcupsys< 1.3.2-1ubuntu7.9UNKNOWN
ubuntu8.04noarchcupsys< 1.3.7-1ubuntu3.3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.10	noarch	cups	< 1.3.9-2ubuntu6.1	UNKNOWN
ubuntu	6.06	noarch	cupsys	< 1.2.2-0ubuntu0.6.06.12	UNKNOWN
ubuntu	7.10	noarch	cupsys	< 1.3.2-1ubuntu7.9	UNKNOWN
ubuntu	8.04	noarch	cupsys	< 1.3.7-1ubuntu3.3	UNKNOWN