ByteOS Network

Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Type	Version	Base score	Base severity	Vector
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE ID	Type	Source
CWE-189	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=752	cve@mitre.org	N/A
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html	cve@mitre.org	N/A
http://secunia.com/advisories/32084	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/32226	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/32284	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/32292	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/32316	cve@mitre.org	Vendor Advisory
http://secunia.com/advisories/32331	cve@mitre.org	N/A
http://secunia.com/advisories/33085	cve@mitre.org	N/A
http://secunia.com/advisories/33111	cve@mitre.org	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1	cve@mitre.org	N/A
http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm	cve@mitre.org	N/A
http://www.cups.org/articles.php?L575	cve@mitre.org	N/A
http://www.cups.org/str.php?L2919	cve@mitre.org	N/A
http://www.debian.org/security/2008/dsa-1656	cve@mitre.org	N/A
http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml	cve@mitre.org	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2008:211	cve@mitre.org	N/A
http://www.redhat.com/support/errata/RHSA-2008-0937.html	cve@mitre.org	N/A
http://www.securityfocus.com/bid/31690	cve@mitre.org	Patch
http://www.securitytracker.com/id?1021034	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/2782	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2008/3401	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2009/1568	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/45790	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10266	cve@mitre.org	N/A
https://usn.ubuntu.com/656-1/	cve@mitre.org	N/A
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html	cve@mitre.org	N/A
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html	cve@mitre.org	N/A
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=752	af854a3a-2127-422b-91ae-364da2661108	N/A
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/32084	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/32226	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/32284	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/32292	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/32316	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
http://secunia.com/advisories/32331	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/33085	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/33111	af854a3a-2127-422b-91ae-364da2661108	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1	af854a3a-2127-422b-91ae-364da2661108	N/A
http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.cups.org/articles.php?L575	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.cups.org/str.php?L2919	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.debian.org/security/2008/dsa-1656	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2008:211	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.redhat.com/support/errata/RHSA-2008-0937.html	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/31690	af854a3a-2127-422b-91ae-364da2661108	Patch
http://www.securitytracker.com/id?1021034	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2008/2782	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2008/3401	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.vupen.com/english/advisories/2009/1568	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/45790	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10266	af854a3a-2127-422b-91ae-364da2661108	N/A
https://usn.ubuntu.com/656-1/	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html	af854a3a-2127-422b-91ae-364da2661108	N/A
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=752

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/32084

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/32226

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/32284

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/32292

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/32316

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: http://secunia.com/advisories/32331

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/33085

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://secunia.com/advisories/33111

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.cups.org/articles.php?L575

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.cups.org/str.php?L2919

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.debian.org/security/2008/dsa-1656

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2008:211

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0937.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/31690

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://www.securitytracker.com/id?1021034

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/2782

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2008/3401

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.vupen.com/english/advisories/2009/1568

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/45790

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10266

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://usn.ubuntu.com/656-1/

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=752