Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade cups | Jul 30, 2024 | Apr 4, 2008 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Apr 3, 2008 |
| Oracle_linux | — | Upgrade cupsUpgrade cups-develUpgrade cups-lpdUpgrade cups-libs | Oct 16, 2024 | Apr 4, 2008 |
| Suse | — | Upgrade cups-libs-x86Upgrade libcupsimage2Upgrade libcups2Upgrade cupsUpgrade cups-libs-32bitUpgrade cups-ddkUpgrade cups-develUpgrade cups-libsUpgrade cups-configUpgrade cups-client | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade cupsys | Nov 8, 2024 | Apr 4, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub