APP: Multiple Vendor CUPS GIF Decoding Routine Buffer Overflow

This signature detects attempts to exploit a known vulnerability against multiple vendor CUPS GIF Decoders. A successful attack can result in a denial-of-service condition.

Extended Description

CUPS is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied GIF image data before copying it to an insufficiently sized buffer. Successful exploits allow attackers to execute arbitrary code with the privileges of a user running the utilities. Failed exploit attempts likely cause denial-of-service conditions. CUPS 1.3.6 is vulnerable; other versions may also be affected.

Affected Products

Debian linux

References

BugTraq: 28544

CVE: CVE-2008-1373

Short Name

APP:CUPS-GIF-BO

Severity

Major

Recommended

False

Recommended Action

Drop

APP: Multiple Vendor CUPS GIF Decoding Routine Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?