See how the open group compares to other vendors in security performance
The Common UNIX Printing System (CUPS) provides a portable printing layerfor UNIX(R) operating systems.Alin Rad Pop discovered a flaw in the handling of PDF files. An attackercould create a malicious PDF file that would cause CUPS to crash orpotentially execute arbitrary code when printed. (CVE-2007-5393)Alin Rad Pop discovered a flaw in in the way CUPS handles certain IPP tags.A remote attacker who is able to connect to the IPP TCP port could send amalicious request causing the CUPS daemon to crash. (CVE-2007-4351)A flaw was found in the way CUPS handled SSL negotiation. A remote attackercapable of connecting to the CUPS daemon could cause CUPS to crash.(CVE-2007-4045)All CUPS users are advised to upgrade to these updated packages, whichcontain backported patches to resolve these issues.