CVE-2008-1373
Fixed in a distro release EPSS 2%
Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.
Products: easy_software_products cups
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.3.7-1 |
| Debian 13 | cups | 1.3.7-1 |
| Debian 14 | cups | 1.3.7-1 |
| Debian 4.0 | cupsys | 1.2.7-4etch4 |
| Debian 5.0 | cupsys | 1.3.6-3+lenny1 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.52 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.52 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.52 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.52 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.20.2.el4_6.6 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.20.2.el4_6.6 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.20.2.el4_6.6 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.20.2.el4_6.6 |
| Red Hat Enterprise Linux 5 | cups | 1:1.2.4-11.14.el5_1.6 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.2.4-11.14.el5_1.6 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.2.4-11.14.el5_1.6 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.2.4-11.14.el5_1.6 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.2.4-11.14.el5_1.6 |