CVE-2008-0047
Fixed in a distro release EPSS 7%
Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.
Products: cups
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.3.6-3 |
| Debian 13 | cups | 1.3.6-3 |
| Debian 14 | cups | 1.3.6-3 |
| Debian 4.0 | cupsys | 1.2.7-4etch3 |
| Red Hat Enterprise Linux 5 | cups | 1:1.2.4-11.14.el5_1.6 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.2.4-11.14.el5_1.6 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.2.4-11.14.el5_1.6 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.2.4-11.14.el5_1.6 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.2.4-11.14.el5_1.6 |
| openSUSE Tumbleweed | cups | 2.3.3op2-4.2 |