CVE-2008-0047: Buffer Overflow

Published Mar 18, 2008

Updated

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.

Affected Software

3 affected components

Apple iOS and macOS=10.5.2

Apple Mac OS X Server=10.5.2

cups CUPS=1.3.5

Remediation

Patch Available

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Event History

Mar 18, 2008

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Data Sourced

11:44 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-0047?

CVE-2008-0047 is considered a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2008-0047?

To fix CVE-2008-0047, you should update CUPS to the latest version that addresses this vulnerability.

Which versions are affected by CVE-2008-0047?

CVE-2008-0047 affects CUPS version 1.3.5 and earlier, as well as the version bundled with Apple Mac OS X 10.5.2.

What causes the vulnerability CVE-2008-0047?

CVE-2008-0047 is caused by a heap-based buffer overflow in the cgiCompileSearch function when printer sharing is enabled.

Can CVE-2008-0047 be exploited remotely?

Yes, CVE-2008-0047 can be exploited by remote attackers through crafted search expressions.