OSVDB ID: 44398

Title: CUPS PNG File Handling Multiple Overflows

Info

Disclosure

Apr 08, 2008

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Classification

Attack Type: Input Manipulation
Impact: Loss of Integrity
Disclosure: Vendor Verified

Solution

Upgrade to version 1.3.8 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Unknown or Incomplete

References

Security Tracker: 1019854
CVE ID: 2008-1722 (see also: NVD)
CERT VU: 218395
Bugtraq ID: 28781
Secunia Advisory ID: 29809 29902 30078 30190 30553 30717 31324 32292 33260
ISS X-Force ID: 41832
OVAL ID: 8768
VUPEN Advisory: ADV-2008-1226
Other Advisory URL: http://lists.debian.org/debian-security-announce/2008/msg00210.html
http://www.debian.org/security/2008/dsa-1625
http://www.gentoo.org/security/en/glsa/glsa-200804-23.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:170
http://www.novell.com/linux/security/advisories/2008_13_sr.html
http://www.ubuntu.com/usn/usn-606-1
http://www.ubuntu.com/usn/usn-656-1
http://www.ubuntulinux.org/support/documentation/usn/usn-656-1
https://lists.ubuntu.com/archives/ubuntu-security-announce/2008-May/000696.html
https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00081.html
Vendor Specific Advisory URL: http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0338
Vendor Specific News/Changelog Entry: http://www.cups.org/str.php?L2790
Vendor Specific Solution URL: http://www.gentoo.org/security/en/glsa/glsa-200804-23.xml
RedHat RHSA: RHSA-2008:0498

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/44398