CVE-2008-1374

CUPS < 1.3.11 - Remote Code Execution via pdftops Filter Integer Overflow

Title source: llm
STIX 2.1

Description

Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an incomplete fix for CVE-2004-0888.

References (8)

Core 8
Core References
Third Party Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2008-0206.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/31388
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/495164/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29630
Broken Link x_refsource_confirm
https://issues.rpath.com/browse/RPL-2390
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41758

Scores

EPSS 0.0387
EPSS Percentile 88.9%

Details

CWE
CWE-190
Status published
Products (1)
apple/cups < 1.3.11
Published Apr 04, 2008
Tracked Since Feb 18, 2026