RHSA-2008:0206: Moderate: cups security update
The Common UNIX Printing System (CUPS) provides a portable printing layerfor UNIX(R) operating systems.Two overflows were discovered in the HP-GL/2-to-PostScript filter. Anattacker could create a malicious HP-GL/2 file that could possibly executearbitrary code as the "lp" user if the file is printed. (CVE-2008-0053)A buffer overflow flaw was discovered in the GIF decoding routines used byCUPS image converting filters "imagetops" and "imagetoraster". An attackercould create a malicious GIF file that could possibly execute arbitrarycode as the "lp" user if the file was printed. (CVE-2008-1373)It was discovered that the patch used to address CVE-2004-0888 in CUPSpackages in Red Hat Enterprise Linux 3 and 4 did not completely resolve theinteger overflow in the "pdftops" filter on 64-bit platforms. An attackercould create a malicious PDF file that could possibly execute arbitrarycode as the "lp" user if the file was printed. (CVE-2008-1374)All cups users are advised to upgrade to these updated packages, whichcontain backported patches to resolve these issues.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2008:0206?
The severity of RHSA-2008:0206 is classified as critical due to the potential for arbitrary code execution.
How do I fix RHSA-2008:0206?
To fix RHSA-2008:0206, update the CUPS package to version 1.1.22-0.rc1.9.20.2.el4_6.6 or later.
What systems are affected by RHSA-2008:0206?
RHSA-2008:0206 affects various versions of the CUPS packages, including cups, cups-devel, and cups-libs on Red Hat Enterprise Linux EL4.
What type of vulnerability is associated with RHSA-2008:0206?
RHSA-2008:0206 is associated with buffer overflow vulnerabilities in the HP-GL/2-to-PostScript filter.
Are there any known exploits for RHSA-2008:0206?
Yes, potential exploits exist that could allow attackers to execute arbitrary code via crafted HP-GL/2 files.