CVE-2008-0882: Buffer Overflow
Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer. NOTE: some of these details are obtained from third party information.
Other sources
Secunia has released and advisory affecting cups printing system:
http://secunia.com/advisories/28994/
Description: A vulnerability has been discovered in CUPS, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.
The vulnerability is caused due to an error within the "processbrowsedata()" function when adding printers and classes. This can be exploited to free the same buffer twice by sending specially crafted browser packets to the UDP port on which cupsd is listening (by default port 631/UDP).
Successful exploitation may allow execution of arbitrary code.
The vulnerability is confirmed in version 1.3.5. Prior versions may also be affected.
Solution: Update to version 1.3.6.
Upstream bug report: http://www.cups.org/str.php?L2656
Upstream patch: http://www.cups.org/strfiles/2656/str2656.patch
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0882?
CVE-2008-0882 is classified as a high severity vulnerability due to its potential to cause a denial of service and possible arbitrary code execution.
How do I fix CVE-2008-0882?
To fix CVE-2008-0882, upgrade CUPS to version 1.3.6 or later, which addresses the double free vulnerability.
What systems are affected by CVE-2008-0882?
CVE-2008-0882 affects CUPS version 1.3.5 and potentially other versions before 1.3.6, particularly on systems using the cupsd port.
Is remote exploitation possible with CVE-2008-0882?
Yes, CVE-2008-0882 can be exploited remotely through crafted UDP Browse packets targeted to the CUPS service.
What impact does CVE-2008-0882 have on systems?
The impact of CVE-2008-0882 includes crashing the CUPS daemon, which can lead to service disruption and potential exploitation of arbitrary code.