APP: Apple CUPS Text-to-PostScript Filter Integer Overflow

This signature detects attempts to exploit a known vulnerability in Apple CUPS Text-to-PostScript texttops Filter. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

CUPS is prone to multiple heap-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data before using it to allocate memory buffers. Remote attackers can exploit these issues to execute arbitrary code within the context of the affected application. Failed exploit attempts will likely cause a denial-of-service condition. Note that local attackers may also exploit these vulnerabilities to elevate privileges. Successful remote exploits may require printer sharing to be enabled on the vulnerable system. These issues affect versions prior to CUPS 1.3.9.

Affected Products

Avaya proactive_contact

References

BugTraq: 31690

CVE: CVE-2008-3640

URL: http://www.cups.org/str.php?L2919

Short Name

APP:CUPS:TEXTTOPS-OF

Severity

Major

Recommended

False

Recommended Action

Drop

APP: Apple CUPS Text-to-PostScript Filter Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?