REDHAT-BUG-490596: Buffer Overflow
An integer overflow flaw, leading to a heap-based buffer overflow, was discovered in the Tagged Image File Format (TIFF) decoding routines used by the CUPS image-converting filters, "imagetops" and "imagetoraster". An attacker could create a malicious TIFF file that could, potentially, execute arbitrary code as the "lp" user if the file was printed.
Acknowledgements:
Red Hat would like to thank Aaron Sigel of the Apple Product Security team and iDefense for responsibly reporting this flaw.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-490596?
The severity of REDHAT-BUG-490596 is classified as high due to the potential for remote code execution.
How does REDHAT-BUG-490596 affect CUPS?
REDHAT-BUG-490596 affects CUPS by allowing an attacker to exploit a heap-based buffer overflow through specially crafted TIFF files.
How can I fix REDHAT-BUG-490596?
To fix REDHAT-BUG-490596, you should update CUPS to the latest version that addresses this vulnerability.
What is the impact of exploiting REDHAT-BUG-490596?
Exploiting REDHAT-BUG-490596 can lead to arbitrary code execution on the affected system.
Is there a workaround for REDHAT-BUG-490596?
Currently, there are no specific workarounds for REDHAT-BUG-490596 other than applying the recommended updates.