Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 1 Dec 2008 09:25:36 -0500 (EST)
From: "Steven M. Christey" <>
cc: "Steven M. Christey" <>
Subject: Re:  (sort of urgent) CVE Request -- cups (repost)

Name: CVE-2008-5286
Status: Candidate
Reference: CONFIRM:
Reference: CONFIRM:
Reference: MLIST:[oss-security] 20081201 (sort of urgent) CVE Request -- cups (repost)
Reference: URL:
Reference: BID:32518
Reference: URL:

Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17
through 1.3.9 allows remote attackers to execute arbitrary code via a
PNG image with a large height value, which bypasses a validation check
and triggers a buffer overflow.

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.