NVD

Id
47500  
Name
CVE-2009-0163  
Description
Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-04-23  
Modified Date
2010-08-21  
Seq
2009-0163  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
237856 47500 CVE-2009-0163 SUSE-SA:2009:024  View
237857 47500 CVE-2009-0163 oval:org.mitre.oval:def:11546  View
237858 47500 CVE-2009-0163 GLSA-200904-20  View
237859 47500 CVE-2009-0163 http://wiki.rpath.com/Advisories:rPSA-2009-0061  View
237860 47500 CVE-2009-0163 http://www.cups.org/articles.php?L582  View
237861 47500 CVE-2009-0163 http://www.cups.org/str.php?L3031  View
237862 47500 CVE-2009-0163 DSA-1773  View
237863 47500 CVE-2009-0163 RHSA-2009:0428  View
237864 47500 CVE-2009-0163 RHSA-2009:0429  View
237865 47500 CVE-2009-0163 20090417 rPSA-2009-0061-1 cups  View
237866 47500 CVE-2009-0163 34571  View
237867 47500 CVE-2009-0163 1022070  View
237868 47500 CVE-2009-0163 USN-760-1  View
237869 47500 CVE-2009-0163 https://bugzilla.redhat.com/show_bug.cgi?id=490596  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40251 JVNDB-2009-001257 CUPS の TIFF イメージデコーディングルーチンにおける整数オーバーフローの脆弱性 CUPS の TIFF イメージデコーディングルーチンには、TIFF イメージの処理に不備があるため、整数オーバーフローとなる脆弱性が存在します。 CVE-2009-0163 37594 CVE-2009-0163 47500 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001257.html 2009-04-16 2010-05-07 View