REDHAT-BUG-490596: Buffer Overflow
First published: Tue Mar 17 2009(Updated: )
An integer overflow flaw, leading to a heap-based buffer overflow, was discovered in the Tagged Image File Format (TIFF) decoding routines used by the CUPS image-converting filters, "imagetops" and "imagetoraster". An attacker could create a malicious TIFF file that could, potentially, execute arbitrary code as the "lp" user if the file was printed. Acknowledgements: Red Hat would like to thank Aaron Sigel of the Apple Product Security team and iDefense for responsibly reporting this flaw.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| CUPS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.cups.org/str.php?L3031
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=335488&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=335488&action=edit
- http://www.cups.org/articles.php?L582
- http://admin.fedoraproject.org/updates/cups-1.3.10-1.fc9
- http://admin.fedoraproject.org/updates/cups-1.3.10-1.fc10
- https://rhn.redhat.com/errata/RHSA-2009-0428.html
- https://rhn.redhat.com/errata/RHSA-2009-0429.html
- https://bugzilla.redhat.com/show_bug.cgi?id=490596
Frequently Asked Questions
What is the severity of REDHAT-BUG-490596?
The severity of REDHAT-BUG-490596 is classified as high due to the potential for remote code execution.
How does REDHAT-BUG-490596 affect CUPS?
REDHAT-BUG-490596 affects CUPS by allowing an attacker to exploit a heap-based buffer overflow through specially crafted TIFF files.
How can I fix REDHAT-BUG-490596?
To fix REDHAT-BUG-490596, you should update CUPS to the latest version that addresses this vulnerability.
What is the impact of exploiting REDHAT-BUG-490596?
Exploiting REDHAT-BUG-490596 can lead to arbitrary code execution on the affected system.
Is there a workaround for REDHAT-BUG-490596?
Currently, there are no specific workarounds for REDHAT-BUG-490596 other than applying the recommended updates.
- collector/redhat-bugzilla
- alias/CVE-2009-0163
- agent/type
- agent/last-modified-date
- agent/weakness
- agent/first-publish-date
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/apple
- canonical/cups