CVE-2008-3641

The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

24.13% chance of exploitation in the next 30 days, 98th percentile

Published

2008-10-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/32470

Security advisories

• http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html
• http://secunia.com/advisories/32084
• http://secunia.com/advisories/32222
• http://secunia.com/advisories/32226
• http://secunia.com/advisories/32284
• http://secunia.com/advisories/32292
• http://secunia.com/advisories/32316
• http://support.apple.com/kb/HT3216
• http://www.securityfocus.com/bid/31681
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:211
• http://www.redhat.com/support/errata/RHSA-2008-0937.html
• http://www.securityfocus.com/bid/31688
• https://usn.ubuntu.com/656-1

References

• CVE Record
• NVD entry