APP: CUPS JBIG2 Symbol Dictionary Buffer Overflow

This signature detects attempts to exploit a known vulnerability in CUPS and Xpdf products. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.

Extended Description

CUPS and Xpdf are prone to a remote buffer-overflow vulnerability because they fail to properly bounds-check user-supplied input before copying it into a finite-sized buffer. Exploiting this issue may allow remote attackers to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions. The following are vulnerable; other applications or versions may also be affected: Xpdf 3.02pl2 and earlier CUPS 1.3.9 and earlier NOTE: This vulnerability may already be covered in BID 34568 (Xpdf JBIG2 Processing Multiple Security Vulnerabilities). We will update (or possibly retire) this BID as more information emerges.

Affected Products

Easy_software_products cups

References

BugTraq: 34791

CVE: CVE-2009-0195

Short Name

APP:CUPS:JBIG2-SYMBOLDICTIONARY

Severity

Major

Recommended

False

Recommended Action

Drop

APP: CUPS JBIG2 Symbol Dictionary Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?