APP: Apple CUPS PNG Filter Overly Large Image Height Integer Overflow

This signature detects attempts to exploit a known vulnerability in the Apple CUPS PNG Filter. A successful attack can lead to a integer overflow and arbitrary remote code execution within the context of the server.

Extended Description

CUPS is prone to an integer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied PNG image sizes before using them to allocate memory buffers. Successful exploits may allow attackers to execute arbitrary code with the privileges of a user running the utilities. Failed exploit attempts likely cause denial-of-service conditions. Versions prior to CUPS 1.3.10 are vulnerable.

Affected Products

Debian linux

References

BugTraq: 32518

CVE: CVE-2008-5286

Short Name

APP:APPLE-CUPS-PNG-FILTER-OF

Severity

Major

Recommended

False

Recommended Action

Drop

APP: Apple CUPS PNG Filter Overly Large Image Height Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?