CVE-2008-0053: Buffer Overflow
Published Mar 18, 2008
·Updated
Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.
Affected Software
76 affected components
apple CUPS=1.1.20
apple CUPS=1.1.5-2
apple CUPS=1.3.9
apple CUPS=1.1.14
apple CUPS=1.3-rc2
apple CUPS=1.1.6-1
apple CUPS=1.1.18
apple CUPS=1.1.12
apple CUPS=1.1.5-1
apple CUPS=1.3.3
apple CUPS=1.1.22
apple CUPS=1.2.0
apple CUPS=1.1.16
apple CUPS=1.4.1
apple CUPS=1.3.1
apple CUPS=1.1.23-rc1
apple CUPS=1.1.20-rc1
apple CUPS=1.1.15
apple CUPS=1.1.17
apple CUPS=1.1.20-rc6
apple CUPS=1.2.4
apple CUPS=1.1.19-rc1
apple CUPS=1.3.2
apple CUPS=1.1.22-rc1
apple CUPS=1.1.7
apple CUPS=1.2-rc2
apple CUPS=1.1.6-2
apple CUPS=1.3-b1
apple CUPS=1.1.3
apple CUPS=1.2.3
apple CUPS=1.1.21
apple CUPS=1.2.9
apple CUPS=1.2.10
apple CUPS=1.1.4
apple CUPS=1.1.23
apple CUPS=1.2.6
apple CUPS=1.2-b1
apple CUPS=1.1.20-rc4
apple CUPS=1.1.19
apple CUPS=1.1
apple CUPS=1.3.4
apple CUPS=1.1.8
apple CUPS=1.1.5
apple CUPS=1.2.1
apple CUPS=1.2-rc3
apple CUPS=1.1.2
apple CUPS=1.1.13
apple CUPS=1.1.19-rc4
apple CUPS=1.1.9-1
apple CUPS<=1.3.5
apple CUPS=1.2.12
apple CUPS=1.1.21-rc2
apple CUPS=1.2-b2
apple CUPS=1.2.7
apple CUPS=1.1.6-3
apple CUPS=1.1.20-rc5
apple CUPS=1.1.9
apple CUPS=1.1.19-rc5
apple CUPS=1.2-rc1
apple CUPS=1.1.1
apple CUPS=1.2.8
apple CUPS=1.2.2
apple CUPS=1.1.10
apple CUPS=1.2.11
apple CUPS=1.1.22-rc2
apple CUPS=1.1.21-rc1
apple CUPS=1.3-rc1
apple CUPS=1.1.11
apple CUPS=1.1.19-rc3
apple CUPS=1.1.6
apple CUPS=1.1.10-1
apple CUPS=1.3.0
apple CUPS=1.1.20-rc2
apple CUPS=1.1.20-rc3
apple CUPS=1.2.5
apple CUPS=1.1.19-rc2
Remediation
Event History
Mar 18, 2008
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-0053?
CVE-2008-0053 is classified with a high severity due to potential remote code execution vulnerabilities.
2
How do I fix CVE-2008-0053?
To fix CVE-2008-0053, upgrade your CUPS installation to version 1.3.6 or later.
3
What versions of CUPS are affected by CVE-2008-0053?
CVE-2008-0053 affects CUPS versions before 1.3.6, including several earlier non-secure versions like 1.1.x and 1.3.x up to 1.3.5.
4
What types of attacks are possible with CVE-2008-0053?
CVE-2008-0053 allows remote attackers to execute arbitrary code through crafted HP-GL/2 files.
5
Are there any known exploits for CVE-2008-0053?
While specific exploits are not publicly detailed, the nature of the vulnerability suggests that crafted files could be used to target unpatched systems.