Published: 19/02/2015 Updated: 30/10/2018

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS prior to 2.0.2 allows remote malicious users to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple cups

CUPS could be made to crash or run programs if it processed a specially crafted file ...

Debian Bug report logs - #778387 cups: CVE-2014-9679 Package: cups; Maintainer for cups is Debian Printing Team <debian-printing@listsdebianorg>; Source for cups is src:cups (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Sat, 14 Feb 2015 13:27:02 UTC Severity: grave Tags: fixed-upstre ...

Peter De Wachter discovered that CUPS, the Common UNIX Printing System, did not correctly parse compressed raster files By submitting a specially crafted raster file, a remote attacker could use this vulnerability to trigger a buffer overflow For the stable distribution (wheezy), this problem has been fixed in version 153-5+deb7u5 For the upco ...

A string reference count bug was found in cupsd, causing premature freeing of string objects An attacker can submit a malicious print job that exploits this flaw to dismantle ACLs protecting privileged operations, allowing a replacement configuration file to be uploaded which in turn allows the attacker to run arbitrary code in the CUPS server (CV ...

CWE-119 https://www.cups.org/str.php?L4551 http://www.openwall.com/lists/oss-security/2015/02/12/12 http://www.securityfocus.com/bid/72594 http://www.openwall.com/lists/oss-security/2015/02/10/15 http://www.debian.org/security/2015/dsa-3172 http://lists.opensuse.org/opensuse-updates/2015-02/msg00098.html http://www.ubuntu.com/usn/USN-2520-1 http://www.mandriva.com/security/advisories?name=MDVSA-2015:049 http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150177.html http://www.securitytracker.com/id/1031776 http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150171.html http://advisories.mageia.org/MGASA-2015-0067.html http://www.mandriva.com/security/advisories?name=MDVSA-2015:108 http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html https://security.gentoo.org/glsa/201607-06 http://rhn.redhat.com/errata/RHSA-2015-1123.html https://usn.ubuntu.com/2520-1/https://nvd.nist.gov

CVE-2014-9679

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect