CVE-2008-0053

EPSS 8.28%
Veröffentlicht 18.03.2008 23:44:00
Zuletzt bearbeitet 16.06.2026 22:48:50
Erkennungen
Login

Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 29

NVD 76 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Apple ≫ Cups Version <= 1.3.5

Apple ≫ Cups Version 1.1

Apple ≫ Cups Version 1.1.1

Apple ≫ Cups Version 1.1.2

Apple ≫ Cups Version 1.1.3

Apple ≫ Cups Version 1.1.4

Apple ≫ Cups Version 1.1.5

Apple ≫ Cups Version 1.1.5-1

Apple ≫ Cups Version 1.1.5-2

Apple ≫ Cups Version 1.1.6

Apple ≫ Cups Version 1.1.6-1

Apple ≫ Cups Version 1.1.6-2

Apple ≫ Cups Version 1.1.6-3

Apple ≫ Cups Version 1.1.7

Apple ≫ Cups Version 1.1.8

Apple ≫ Cups Version 1.1.9

Apple ≫ Cups Version 1.1.9-1

Apple ≫ Cups Version 1.1.10

Apple ≫ Cups Version 1.1.10-1

Apple ≫ Cups Version 1.1.11

Apple ≫ Cups Version 1.1.12

Apple ≫ Cups Version 1.1.13

Apple ≫ Cups Version 1.1.14

Apple ≫ Cups Version 1.1.15

Apple ≫ Cups Version 1.1.16

Apple ≫ Cups Version 1.1.17

Apple ≫ Cups Version 1.1.18

Apple ≫ Cups Version 1.1.19

Apple ≫ Cups Version 1.1.19 Update rc1

Apple ≫ Cups Version 1.1.19 Update rc2

Apple ≫ Cups Version 1.1.19 Update rc3

Apple ≫ Cups Version 1.1.19 Update rc4

Apple ≫ Cups Version 1.1.19 Update rc5

Apple ≫ Cups Version 1.1.20

Apple ≫ Cups Version 1.1.20 Update rc1

Apple ≫ Cups Version 1.1.20 Update rc2

Apple ≫ Cups Version 1.1.20 Update rc3

Apple ≫ Cups Version 1.1.20 Update rc4

Apple ≫ Cups Version 1.1.20 Update rc5

Apple ≫ Cups Version 1.1.20 Update rc6

Apple ≫ Cups Version 1.1.21

Apple ≫ Cups Version 1.1.21 Update rc1

Apple ≫ Cups Version 1.1.21 Update rc2

Apple ≫ Cups Version 1.1.22

Apple ≫ Cups Version 1.1.22 Update rc1

Apple ≫ Cups Version 1.1.22 Update rc2

Apple ≫ Cups Version 1.1.23

Apple ≫ Cups Version 1.1.23 Update rc1

Apple ≫ Cups Version 1.2 Update b1

Apple ≫ Cups Version 1.2 Update b2

Apple ≫ Cups Version 1.2 Update rc1

Apple ≫ Cups Version 1.2 Update rc2

Apple ≫ Cups Version 1.2 Update rc3

Apple ≫ Cups Version 1.2.0

Apple ≫ Cups Version 1.2.1

Apple ≫ Cups Version 1.2.2

Apple ≫ Cups Version 1.2.3

Apple ≫ Cups Version 1.2.4

Apple ≫ Cups Version 1.2.5

Apple ≫ Cups Version 1.2.6

Apple ≫ Cups Version 1.2.7

Apple ≫ Cups Version 1.2.8

Apple ≫ Cups Version 1.2.9

Apple ≫ Cups Version 1.2.10

Apple ≫ Cups Version 1.2.11

Apple ≫ Cups Version 1.2.12

Apple ≫ Cups Version 1.3 Update b1

Apple ≫ Cups Version 1.3 Update rc1

Apple ≫ Cups Version 1.3 Update rc2

Apple ≫ Cups Version 1.3.0

Apple ≫ Cups Version 1.3.1

Apple ≫ Cups Version 1.3.2

Apple ≫ Cups Version 1.3.3

Apple ≫ Cups Version 1.3.4

Apple ≫ Cups Version 1.3.9

Apple ≫ Cups Version 1.4.1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	8.28%	0.942

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://docs.info.apple.com/article.html?artnum=307562

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Patch

http://www.vupen.com/english/advisories/2008/0924/references

Vendor Advisory

http://secunia.com/advisories/29420

Vendor Advisory

http://secunia.com/advisories/29603

Vendor Advisory

http://secunia.com/advisories/29634

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200804-01.xml

http://www.ubuntu.com/usn/usn-598-1

http://www.securityfocus.com/bid/28304

http://www.us-cert.gov/cas/techalerts/TA08-079A.html

US Government Resource

http://secunia.com/advisories/29573

Vendor Advisory

http://secunia.com/advisories/29655

Vendor Advisory

http://secunia.com/advisories/29750

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDVSA-2008:081

http://www.redhat.com/support/errata/RHSA-2008-0192.html

https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html

http://secunia.com/advisories/29630

Vendor Advisory

http://secunia.com/advisories/29659

Vendor Advisory

http://secunia.com/advisories/31324

Vendor Advisory

http://www.debian.org/security/2008/dsa-1625

http://www.redhat.com/support/errata/RHSA-2008-0206.html

http://www.securityfocus.com/bid/28334

http://www.securitytracker.com/id?1019672

https://exchange.xforce.ibmcloud.com/vulnerabilities/41272

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10356

https://nvd.nist.gov/vuln/detail/CVE-2008-0053

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-0053

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-0053

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2008-0053