Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade cups-develUpgrade cupsUpgrade cups-libs | Dec 1, 2016 | Oct 14, 2008 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Oct 14, 2008 |
| Freebsd | — | Upgrade cups-base | Dec 10, 2025 | Oct 10, 2008 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Oct 14, 2008 |
| Oracle_linux | — | Upgrade cups-libsUpgrade cups-lpdUpgrade cupsUpgrade cups-devel | Oct 16, 2024 | Oct 14, 2008 |
| Suse | — | Upgrade cups-libsUpgrade cups-libs-32bitUpgrade suse-releaseUpgrade cupsUpgrade cups-clientUpgrade cups-libs-64bitUpgrade cups-develUpgrade cups-libs-x86 | Feb 17, 2015 | Oct 14, 2008 |
| Ubuntu | — | Upgrade cupsys | Nov 8, 2024 | Oct 14, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub