10

CVE-2008-3641

Exploit
The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Cups Version <= 1.3.8
Apple ≫ Cups Version1.1
Apple ≫ Cups Version1.1.1
Apple ≫ Cups Version1.1.2
Apple ≫ Cups Version1.1.3
Apple ≫ Cups Version1.1.4
Apple ≫ Cups Version1.1.5
Apple ≫ Cups Version1.1.5-1
Apple ≫ Cups Version1.1.5-2
Apple ≫ Cups Version1.1.6
Apple ≫ Cups Version1.1.6-1
Apple ≫ Cups Version1.1.6-2
Apple ≫ Cups Version1.1.6-3
Apple ≫ Cups Version1.1.7
Apple ≫ Cups Version1.1.8
Apple ≫ Cups Version1.1.9
Apple ≫ Cups Version1.1.9-1
Apple ≫ Cups Version1.1.10
Apple ≫ Cups Version1.1.10-1
Apple ≫ Cups Version1.1.11
Apple ≫ Cups Version1.1.12
Apple ≫ Cups Version1.1.13
Apple ≫ Cups Version1.1.14
Apple ≫ Cups Version1.1.15
Apple ≫ Cups Version1.1.16
Apple ≫ Cups Version1.1.17
Apple ≫ Cups Version1.1.18
Apple ≫ Cups Version1.1.19
Apple ≫ Cups Version1.1.19 Updaterc1
Apple ≫ Cups Version1.1.19 Updaterc2
Apple ≫ Cups Version1.1.19 Updaterc3
Apple ≫ Cups Version1.1.19 Updaterc4
Apple ≫ Cups Version1.1.19 Updaterc5
Apple ≫ Cups Version1.1.20
Apple ≫ Cups Version1.1.20 Updaterc1
Apple ≫ Cups Version1.1.20 Updaterc2
Apple ≫ Cups Version1.1.20 Updaterc3
Apple ≫ Cups Version1.1.20 Updaterc4
Apple ≫ Cups Version1.1.20 Updaterc5
Apple ≫ Cups Version1.1.20 Updaterc6
Apple ≫ Cups Version1.1.21
Apple ≫ Cups Version1.1.21 Updaterc1
Apple ≫ Cups Version1.1.21 Updaterc2
Apple ≫ Cups Version1.1.22
Apple ≫ Cups Version1.1.22 Updaterc1
Apple ≫ Cups Version1.1.22 Updaterc2
Apple ≫ Cups Version1.1.23
Apple ≫ Cups Version1.1.23 Updaterc1
Apple ≫ Cups Version1.2 Updateb1
Apple ≫ Cups Version1.2 Updateb2
Apple ≫ Cups Version1.2 Updaterc1
Apple ≫ Cups Version1.2 Updaterc2
Apple ≫ Cups Version1.2 Updaterc3
Apple ≫ Cups Version1.2.0
Apple ≫ Cups Version1.2.1
Apple ≫ Cups Version1.2.2
Apple ≫ Cups Version1.2.3
Apple ≫ Cups Version1.2.4
Apple ≫ Cups Version1.2.5
Apple ≫ Cups Version1.2.6
Apple ≫ Cups Version1.2.7
Apple ≫ Cups Version1.2.8
Apple ≫ Cups Version1.2.9
Apple ≫ Cups Version1.2.10
Apple ≫ Cups Version1.2.11
Apple ≫ Cups Version1.2.12
Apple ≫ Cups Version1.3 Updateb1
Apple ≫ Cups Version1.3 Updaterc1
Apple ≫ Cups Version1.3 Updaterc2
Apple ≫ Cups Version1.3.0
Apple ≫ Cups Version1.3.1
Apple ≫ Cups Version1.3.2
Apple ≫ Cups Version1.3.3
Apple ≫ Cups Version1.3.4
Apple ≫ Cups Version1.3.5
Apple ≫ Cups Version1.3.6
Apple ≫ Cups Version1.3.7
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 24.13% 0.976
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
http://secunia.com/advisories/33568
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
Vendor Advisory
http://secunia.com/advisories/32222
Vendor Advisory
http://support.apple.com/kb/HT3216
Vendor Advisory
http://www.securityfocus.com/bid/31681
Patch
http://www.vupen.com/english/advisories/2008/2780
http://secunia.com/advisories/32292
Vendor Advisory
https://usn.ubuntu.com/656-1/
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html
http://secunia.com/advisories/32316
Vendor Advisory
http://secunia.com/advisories/32084
Vendor Advisory
http://secunia.com/advisories/32226
Vendor Advisory
http://secunia.com/advisories/32284
Vendor Advisory
http://secunia.com/advisories/32331
http://secunia.com/advisories/33085
http://secunia.com/advisories/33111
http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1
http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm
http://www.cups.org/articles.php?L575
http://www.cups.org/str.php?L2911
Exploit
http://www.debian.org/security/2008/dsa-1656
http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:211
http://www.redhat.com/support/errata/RHSA-2008-0937.html
http://www.securityfocus.com/archive/1/497221/100/0/threaded
http://www.securityfocus.com/bid/31688
http://www.securitytracker.com/id?1021031
http://www.vupen.com/english/advisories/2008/2782
http://www.vupen.com/english/advisories/2008/3401
http://www.vupen.com/english/advisories/2009/1568
http://www.zerodayinitiative.com/advisories/ZDI-08-067
https://exchange.xforce.ibmcloud.com/vulnerabilities/45779
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9666
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html