Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade cups | Jul 30, 2024 | Apr 10, 2008 |
| Gentoo Linux | — | Upgrade net-print/cups. | Oct 30, 2017 | Apr 10, 2008 |
| Oracle_linux | — | Upgrade cupsUpgrade cups-libsUpgrade cups-develUpgrade cups-lpd | Oct 16, 2024 | Apr 10, 2008 |
| Suse | — | Upgrade cups-clientUpgrade cups-libsUpgrade cups-ddkUpgrade cups-libs-x86Upgrade cups-configUpgrade cupsUpgrade libcupsimage2Upgrade cups-develUpgrade cups-libs-32bitUpgrade libcups2 | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade cupsys | Nov 8, 2024 | Apr 10, 2008 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub