Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple cups 1.1.20 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2008-5286
Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 up to and including 1.3.9 allows remote malicious users to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow.
Apple Cups 1.1.19Apple Cups 1.1.20Apple Cups 1.1.22Apple Cups 1.1.23Apple Cups 1.2.3Apple Cups 1.2.4Apple Cups 1.2Apple Cups 1.3.5Apple Cups 1.3.6Apple Cups 1.1.17Apple Cups 1.1.18Apple Cups 1.1.21Apple Cups 1.2.10Apple Cups 1.2.11Apple Cups 1.2.7Apple Cups 1.2.8Apple Cups 1.3.0Apple Cups 1.3.1Apple Cups 1.3Apple Cups 1.2.0Apple Cups 1.2.1Apple Cups 1.2.5
NA
CVE-2009-0163
Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and previous versions allows remote malicious users to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageRead...
Apple Cups 1.3.6Apple Cups 1.1.3Apple Cups 1.1.4Apple Cups 1.1.6-2Apple Cups 1.1.8Apple Cups 1.1.11Apple Cups 1.1.14Apple Cups 1.1.19Apple Cups 1.1.20Apple Cups 1.1.21Apple Cups 1.2Apple Cups 1.1.23Apple Cups 1.2.2Apple Cups 1.2.6Apple Cups 1.3Apple Cups 1.3.5Apple Cups 1.3.8Apple Cups 1.1.5-1Apple Cups 1.1.5-2Apple Cups 1.1.9-1Apple Cups 1.1.10-1Apple Cups 1.1.15
NA
CVE-2009-0164
The web interface for CUPS prior to 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote malicious users to conduct DNS rebinding attacks.
Apple Cups 1.1.11Apple Cups 1.1.14Apple Cups 1.1.19Apple Cups 1.1.16Apple Cups 1.1.20Apple Cups 1.1.22Apple Cups 1.1.9Apple Cups 1.1.9-1Apple Cups 1.1.6-1Apple Cups 1.2.6Apple Cups 1.2.4Apple Cups 1.2.3Apple Cups 1.3.0Apple Cups 1.2Apple Cups 1.3.1Apple Cups 1.3Apple Cups 1.1Apple Cups 1.1.10-1Apple Cups 1.1.13Apple Cups 1.1.18Apple Cups 1.1.17Apple Cups 1.1.21
NA
CVE-2008-3641
The Hewlett-Packard Graphics Language (HPGL) filter in CUPS prior to 1.3.9 allows remote malicious users to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.
Apple CupsApple Cups 1.3.0Apple Cups 1.3Apple Cups 1.2.8Apple Cups 1.2.7Apple Cups 1.2.0Apple Cups 1.2Apple Cups 1.1.22Apple Cups 1.1.20Apple Cups 1.1.19Apple Cups 1.1.18Apple Cups 1.1.11Apple Cups 1.1.10-1Apple Cups 1.1.6-2Apple Cups 1.1.6-1Apple Cups 1.1.1Apple Cups 1.1Apple Cups 1.3.4Apple Cups 1.3.3Apple Cups 1.2.12Apple Cups 1.2.11Apple Cups 1.2.4
NA
CVE-2008-3639
Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS prior to 1.3.9 allows remote malicious users to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.
Apple Cups 1.1.11Apple Cups 1.1.14Apple Cups 1.1.19Apple Cups 1.1.16Apple Cups 1.1.20Apple Cups 1.1.22Apple Cups 1.2.1Apple Cups 1.2.0Apple Cups 1.1.8Apple Cups 1.1.7Apple Cups 1.2.10Apple Cups 1.2.11Apple Cups 1.2.9Apple Cups 1.3.0Apple Cups 1.3Apple Cups 1.3.4Apple Cups 1.1.10-1Apple Cups 1.1.1Apple Cups 1.1.2Apple Cups 1.1.21Apple Cups 1.1.5-2Apple Cups 1.1.3
NA
CVE-2008-3640
Integer overflow in the WriteProlog function in texttops in CUPS prior to 1.3.9 allows remote malicious users to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.
Apple Cups 1.1.11Apple Cups 1.1.14Apple Cups 1.1.13Apple Cups 1.1.16Apple Cups 1.1.18Apple Cups 1.1.20Apple Cups 1.1.1Apple Cups 1.1.10Apple Cups 1.1.19Apple Cups 1.1.21Apple Cups 1.1.3Apple Cups 1.1.4Apple Cups 1.1.15Apple Cups 1.1.12Apple Cups 1.1.23Apple Cups 1.1.22Apple Cups 1.1.5Apple Cups 1.2.1Apple Cups 1.1.6-2Apple Cups 1.1.8Apple Cups 1.2.7Apple Cups 1.2.8
NA
CVE-2008-0053
Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS prior to 1.3.6 might allow remote malicious users to execute arbitrary code via a crafted HP-GL/2 file.
Apple Cups 1.1.5-2Apple Cups 1.1.6Apple Cups 1.1.10-1Apple Cups 1.1.10Apple Cups 1.1.18Apple Cups 1.1.17Apple Cups 1.1.19Apple Cups 1.1.20Apple Cups 1.1.21Apple Cups 1.1.22Apple Cups 1.1.1Apple Cups 1.1.5-1Apple Cups 1.1.5Apple Cups 1.1.9Apple Cups 1.1.9-1Apple Cups 1.1.16Apple Cups 1.1.15Apple Cups 1.2.1Apple Cups 1.2.0Apple Cups 1.3.9Apple Cups 1.2.7Apple Cups 1.3
NA
CVE-2008-5184
The web interface (cgi-bin/admin.c) in CUPS prior to 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easier for remote malicious users to bypass intended policy and conduct CSRF attacks via the (1) add and (2) cancel RSS subscription f...
Apple Cups 1.1.10-1Apple Cups 1.1.1Apple Cups 1.1.10Apple Cups 1.1.19Apple Cups 1.1.2Apple Cups 1.1.20Apple Cups 1.1.21Apple Cups 1.1.5-2Apple Cups 1.1.3Apple Cups 1.1.8Apple Cups 1.1.7Apple Cups 1.2.10Apple Cups 1.2.11Apple Cups 1.2Apple Cups 1.3.3Apple Cups 1.3.6Apple Cups 1.1.15Apple Cups 1.1.12Apple Cups 1.1.23Apple Cups 1.1.22Apple Cups 1.1.4Apple Cups 1.1.5
NA
CVE-2010-0542
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS prior to 1.4.4 does not check the return values of certain calloc calls, which allows remote malicious users to cause a denial of service (NULL pointer dereference or heap memory corruption) ...
Apple Cups 1.1.1Apple Cups 1.1.5-1Apple Cups 1.1.5Apple Cups 1.1.9Apple Cups 1.1.9-1Apple Cups 1.1.16Apple Cups 1.1.15Apple Cups 1.1.19Apple Cups 1.1.20Apple Cups 1.1.22Apple Cups 1.2.1Apple Cups 1.2.0Apple Cups 1.3.9Apple Cups 1.2.7Apple Cups 1.3Apple Cups 1.3.8Apple Cups 1.3.7Apple Cups 1.1.5-2Apple Cups 1.1.6Apple Cups 1.1.10-1Apple Cups 1.1.10Apple Cups 1.1.18
NA
CVE-2010-2432
The cupsDoAuthentication function in auth.c in the client in CUPS prior to 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses.
Apple Cups 1.1.2Apple Cups 1.1.3Apple Cups 1.1.6-3Apple Cups 1.1.6-2Apple Cups 1.1.12Apple Cups 1.1.11Apple Cups 1.1.14Apple Cups 1.1.20Apple Cups 1.1.19Apple Cups 1.1.21Apple Cups 1.2Apple Cups 1.4.1Apple Cups 1.2.4Apple Cups 1.2.3Apple Cups 1.2.10Apple Cups 1.2.11Apple Cups 1.3.3Apple Cups 1.3.4Apple Cups 1.3.10Apple Cups 1.3.11Apple Cups 1.3.6Apple Cups 1.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
race conditionCVE-2024-4249CVE-2024-4244CVE-2023-20198TCPCVE-2022-48648CVE-2022-48636CVE-2024-21345SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook