Cups : Security Vulnerabilities, CVEs, Published In 2008 (Overflow)
Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer. NOTE: some of these details are obtained from third party information.
Max CVSS
10.0
EPSS Score
12.29%
Published
2008-02-21
Updated
2017-09-29
Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.
Max CVSS
9.3
EPSS Score
85.52%
Published
2008-03-18
Updated
2017-09-29
2 vulnerabilities found