CVE-2008-3641: Critical severity cups vulnerability
Published Oct 10, 2008
·Updated
The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.
Affected Software
77 affected components
apple CUPS<=1.3.8
apple CUPS=1.1
apple CUPS=1.1.1
apple CUPS=1.1.2
apple CUPS=1.1.3
apple CUPS=1.1.4
apple CUPS=1.1.5
apple CUPS=1.1.5-1
apple CUPS=1.1.5-2
apple CUPS=1.1.6
apple CUPS=1.1.6-1
apple CUPS=1.1.6-2
apple CUPS=1.1.6-3
apple CUPS=1.1.7
apple CUPS=1.1.8
apple CUPS=1.1.9
apple CUPS=1.1.9-1
apple CUPS=1.1.10
apple CUPS=1.1.10-1
apple CUPS=1.1.11
apple CUPS=1.1.12
apple CUPS=1.1.13
apple CUPS=1.1.14
apple CUPS=1.1.15
apple CUPS=1.1.16
apple CUPS=1.1.17
apple CUPS=1.1.18
apple CUPS=1.1.19
apple CUPS=1.1.19-rc1
apple CUPS=1.1.19-rc2
apple CUPS=1.1.19-rc3
apple CUPS=1.1.19-rc4
apple CUPS=1.1.19-rc5
apple CUPS=1.1.20
apple CUPS=1.1.20-rc1
apple CUPS=1.1.20-rc2
apple CUPS=1.1.20-rc3
apple CUPS=1.1.20-rc4
apple CUPS=1.1.20-rc5
apple CUPS=1.1.20-rc6
apple CUPS=1.1.21
apple CUPS=1.1.21-rc1
apple CUPS=1.1.21-rc2
apple CUPS=1.1.22
apple CUPS=1.1.22-rc1
apple CUPS=1.1.22-rc2
apple CUPS=1.1.23
apple CUPS=1.1.23-rc1
apple CUPS=1.2-b1
apple CUPS=1.2-b2
apple CUPS=1.2-rc1
apple CUPS=1.2-rc2
apple CUPS=1.2-rc3
apple CUPS=1.2.0
apple CUPS=1.2.1
apple CUPS=1.2.2
apple CUPS=1.2.3
apple CUPS=1.2.4
apple CUPS=1.2.5
apple CUPS=1.2.6
apple CUPS=1.2.7
apple CUPS=1.2.8
apple CUPS=1.2.9
apple CUPS=1.2.10
apple CUPS=1.2.11
apple CUPS=1.2.12
apple CUPS=1.3-b1
apple CUPS=1.3-rc1
apple CUPS=1.3-rc2
apple CUPS=1.3.0
apple CUPS=1.3.1
apple CUPS=1.3.2
apple CUPS=1.3.3
apple CUPS=1.3.4
apple CUPS=1.3.5
apple CUPS=1.3.6
apple CUPS=1.3.7
Remediation
Patch Available
Event History
Oct 10, 2008
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3641?
CVE-2008-3641 has a maximum severity rating, indicating a critical security risk due to potential remote code execution.
2
How do I fix CVE-2008-3641?
To fix CVE-2008-3641, update CUPS to version 1.3.9 or later where the vulnerability is addressed.
3
What types of attacks can exploit CVE-2008-3641?
CVE-2008-3641 can be exploited through crafted pen width and pen color opcodes sent to the HPGL filter in CUPS.
4
Which versions of CUPS are affected by CVE-2008-3641?
CVE-2008-3641 affects various versions of CUPS prior to 1.3.9, including several specific older versions.
5
Who is impacted by CVE-2008-3641?
Users and systems running affected versions of CUPS are at risk of CVE-2008-3641 if they process untrusted HPGL data.