HIGH🇬🇧 English

CVE-2008-0882

CVSS 10.0v2.0pub. 2008-02-21upd. 2026-04-23

Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer. NOTE: some of these details are obtained from third party information.

oryginał EN
CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Cups

    APP
    Cups
    1.3.5
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
RCEDoS
CWE
Referencje

Powiązane podatności

CVE-2018-6553HIGH8.8ten sam produkt

The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker co...

CVE-2014-8166HIGH8.8ten sam produkt

The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, wh...

CVE-2015-1158HIGH10.0ten sam produkt

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for m...

CVE-2008-0047HIGH9.3ten sam produkt

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the ve...

CVE-2007-4351HIGH10.0ten sam produkt

Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a deni...