CVE-2008-3641
NoneCVSS
—
EPSS
24.1%
Published
Oct 10, 2008
CISA due date
—
The record
The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | cups | 0 | 1.3.8-1lenny2 |
| Debian:11 | cups | 0 | 1.3.8-1lenny2 |
| Debian:12 | cups | 0 | 1.3.8-1lenny2 |
| Debian:13 | cups | 0 | 1.3.8-1lenny2 |
| Debian:4.0 | cupsys | 0 | 1.2.7-4etch5 |
| Red Hat:enterprise_linux:3::as | cups | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::as | cups-debuginfo | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::as | cups-devel | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::as | cups-libs | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::desktop | cups | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::desktop | cups-debuginfo | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::desktop | cups-devel | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::desktop | cups-libs | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::es | cups | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::es | cups-debuginfo | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::es | cups-devel | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::es | cups-libs | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::ws | cups | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::ws | cups-debuginfo | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::ws | cups-devel | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:3::ws | cups-libs | 0 | 1:1.1.17-13.3.54 |
| Red Hat:enterprise_linux:4::as | cups | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::as | cups-debuginfo | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::as | cups-devel | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::as | cups-libs | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::desktop | cups | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::desktop | cups-debuginfo | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::desktop | cups-devel | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::desktop | cups-libs | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::es | cups | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::es | cups-debuginfo | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::es | cups-devel | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::es | cups-libs | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::ws | cups | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::ws | cups-debuginfo | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::ws | cups-devel | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:4::ws | cups-libs | 0 | 1:1.1.22-0.rc1.9.27.el4_7.1 |
| Red Hat:enterprise_linux:5::client | cups | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::client | cups-debuginfo | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::client | cups-devel | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::client | cups-libs | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::client | cups-lpd | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::client_workstation | cups | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::client_workstation | cups-debuginfo | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::client_workstation | cups-devel | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::client_workstation | cups-libs | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::client_workstation | cups-lpd | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::server | cups | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::server | cups-debuginfo | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::server | cups-devel | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::server | cups-libs | 0 | 1:1.2.4-11.18.el5_2.2 |
| Red Hat:enterprise_linux:5::server | cups-lpd | 0 | 1:1.2.4-11.18.el5_2.2 |
| openSUSE:Tumbleweed | cups | 0 | 2.3.3op2-4.2 |
Related vulnerabilities
- CVE-2023-32360 An authentication issue was addressed with improved state management. Also affects cups
- CVE-2007-5849 Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c)… Also affects cups
- CVE-2024-47176 CUPS is a standards-based, open-source printing system, and `cups-browsed` contains… Also affects cups
- CVE-2024-47076 CUPS is a standards-based, open-source printing system, and `libcupsfilters` contains the… Also affects cups
- CVE-2024-47175 CUPS is a standards-based, open-source printing system, and `libppd` can be used for… Also affects cups
- CVE-2024-47177 CUPS is a standards-based, open-source printing system, and cups-filters provides… Also affects cups
- CVE-2019-2228 In array_find of array.c, there is a possible out-of-bounds read due to an incorrect… Also affects cups
- CVE-2015-3258 Heap-based buffer overflow in the WriteProlog function in filter/texttopdf.c in texttopdf… Also affects cups