CVE-2008-1722
Fixed in a distro release EPSS 2%
Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image.
Products: cups
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.3.7-2 |
| Debian 13 | cups | 1.3.7-2 |
| Debian 14 | cups | 1.3.7-2 |
| Debian 4.0 | cupsys | 1.2.7-4etch4 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.53 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.53 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.53 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.53 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.20.2.el4_6.8 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.20.2.el4_6.8 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.20.2.el4_6.8 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.20.2.el4_6.8 |
| Red Hat Enterprise Linux 5 | cups | 1:1.2.4-11.18.el5_2.1 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.2.4-11.18.el5_2.1 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.2.4-11.18.el5_2.1 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.2.4-11.18.el5_2.1 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.2.4-11.18.el5_2.1 |
| openSUSE Tumbleweed | cups | 2.3.3op2-4.2 |