FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2008-5286

This CVE name corresponds to:

Entered	Topic
2008-11-29	cups -- potential buffer overflow in PNG reading code

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2008-5286 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2008-5286
Phase	Assigned(20081201)

Description

Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote attackers to execute arbitrary code via a PNG image with a large height value, which bypasses a validation check and triggers a buffer overflow.

References

Source	Reference
CONFIRM	http://svn.easysw.com/public/cups/trunk/CHANGES-1.3.txt
CONFIRM	http://www.cups.org/str.php?L2974
MLIST	[oss-security] 20081201 (sort of urgent) CVE Request -- cups (repost)
DEBIAN	DSA-1677
GENTOO	GLSA-200812-11
GENTOO	GLSA-200812-01
MANDRIVA	MDVSA-2009:028
MANDRIVA	MDVSA-2009:029
REDHAT	RHSA-2008:1028
SUSE	SUSE-SR:2009:002
BID	32518
OVAL	oval:org.mitre.oval:def:10058
SECTRACK	1021298
SECUNIA	33111
VUPEN	ADV-2008-3315
SECUNIA	33101
SECUNIA	32962
SECUNIA	33568
XF	cups-cupsimagereadpng-overflow(46933)