NVD

Id
3507  
Name
CVE-2008-3639  
Description
Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-10-14  
Modified Date
2012-10-29  
Seq
2008-3639  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
22033 3507 CVE-2008-3639 20081009 Multiple Vendor CUPS SGI imagetops Heap Overflow Vulnerability  View
22034 3507 CVE-2008-3639 SUSE-SR:2008:021  View
22035 3507 CVE-2008-3639 oval:org.mitre.oval:def:11464  View
22036 3507 CVE-2008-3639 261088  View
22037 3507 CVE-2008-3639 http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm  View
22038 3507 CVE-2008-3639 http://www.cups.org/articles.php?L575  View
22039 3507 CVE-2008-3639 http://www.cups.org/str.php?L2918  View
22040 3507 CVE-2008-3639 DSA-1656  View
22041 3507 CVE-2008-3639 GLSA-200812-11  View
22042 3507 CVE-2008-3639 MDVSA-2008:211  View
22043 3507 CVE-2008-3639 RHSA-2008:0937  View
22044 3507 CVE-2008-3639 31690  View
22045 3507 CVE-2008-3639 1021033  View
22046 3507 CVE-2008-3639 USN-656-1  View
22047 3507 CVE-2008-3639 ADV-2008-2782  View
22048 3507 CVE-2008-3639 ADV-2008-3401  View
22049 3507 CVE-2008-3639 ADV-2009-1568  View
22050 3507 CVE-2008-3639 cups-readrle16-bo(45789)  View
22051 3507 CVE-2008-3639 FEDORA-2008-8801  View
22052 3507 CVE-2008-3639 FEDORA-2008-8844  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46517 JVNDB-2008-001827 CUPS の imagetops における SGI イメージの処理に関するバッファオーバーフローの脆弱性 CUPS の imagetops に実装されている read_rle16 関数には、SGI イメージの処理に不備があるため、ヒープペースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-3639 33752 CVE-2008-3639 3507 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001827.html 2008-10-10 2008-12-25 View