National Cyber Awareness System

Vulnerability Summary for CVE-2008-1722

Overview

Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#218395

Name: VU#218395

Hyperlink:http://www.kb.cert.org/vuls/id/218395

External Source: CONFIRM

Name: http://www.cups.org/str.php?L2790

Type: Patch Information

Hyperlink:http://www.cups.org/str.php?L2790

External Source: FEDORA

Name: FEDORA-2008-3449

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00081.html

External Source: FEDORA

Name: FEDORA-2008-3586

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2008-May/msg00068.html

External Source: VUPEN

Name: ADV-2008-1226

Hyperlink:http://www.vupen.com/english/advisories/2008/1226/references

External Source: UBUNTU

Name: USN-656-1

Hyperlink:http://www.ubuntulinux.org/support/documentation/usn/usn-656-1

External Source: SUSE

Name: SUSE-SR:2008:013

Hyperlink:http://www.novell.com/linux/security/advisories/2008_13_sr.html

External Source: MANDRIVA

Name: MDVSA-2008:170

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:170

External Source: DEBIAN

Name: DSA-1625

Hyperlink:http://www.debian.org/security/2008/dsa-1625

External Source: SECUNIA

Name: 32292

Hyperlink:http://secunia.com/advisories/32292

External Source: SECUNIA

Name: 31324

Hyperlink:http://secunia.com/advisories/31324

External Source: SECUNIA

Name: 30717

Hyperlink:http://secunia.com/advisories/30717

External Source: SECUNIA

Name: 30190

Hyperlink:http://secunia.com/advisories/30190

External Source: OVAL

Name: oval:org.mitre.oval:def:8768

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8768

External Source: REDHAT

Name: RHSA-2008:0498

Hyperlink:https://rhn.redhat.com/errata/RHSA-2008-0498.html

External Source: XF

Name: cups-imagepng-imagezoom-bo(41832)

Hyperlink:http://xforce.iss.net/xforce/xfdb/41832

External Source: UBUNTU

Name: USN-606-1

Hyperlink:http://www.ubuntu.com/usn/usn-606-1

External Source: SECTRACK

Name: 1019854

Hyperlink:http://www.securitytracker.com/id?1019854

External Source: BID

Name: 28781

Hyperlink:http://www.securityfocus.com/bid/28781

External Source: OSVDB

Name: 44398

Hyperlink:http://www.osvdb.org/44398

External Source: GENTOO

Name: GLSA-200804-23

Hyperlink:http://www.gentoo.org/security/en/glsa/glsa-200804-23.xml

External Source: SECUNIA

Name: 30553

Hyperlink:http://secunia.com/advisories/30553

External Source: SECUNIA

Name: 30078

Hyperlink:http://secunia.com/advisories/30078

External Source: SECUNIA

Name: 29902

Hyperlink:http://secunia.com/advisories/29902

External Source: SECUNIA

Name: 29809

Hyperlink:http://secunia.com/advisories/29809

References to Check Content

Identifier:oval:org.mitre.oval:def:8768

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:8768