cups vulnerabilities (Debian)
132 vulnerabilities.
cupsDebianInteger underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2...6.8 MediumcupsDebianThe web interface in CUPS before 2.0 does not check that files have world-readable permissions,...5.0 MediumcupsDebianCUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html...1.9 LowcupsDebianThe web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a...1.5 LowcupsDebianThe web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files...1.2 LowcupsDebianCross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System ...4.3 MediumcupsDebianThe OPVPWrapper::loadDriver function in oprs/OPVPWrapper.cxx in the pdftoopvp filter in CUPS and...4.4 MediumcupsDebianMultiple integer overflows in (1) OPVPOutputDev.cxx and (2) oprs/OPVPSplash.cxx in the pdftoopvp...6.8 MediumcupsDebianHeap-based buffer overflow in the pdftoopvp filter in CUPS and cups-filters before 1.0.47 allows...6.8 MediumcupsDebianlppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read...1.2 LowcupsDebianCUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web...7.2 HighcupsDebianThe gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly...5.1 MediumcupsDebianThe LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in...5.1 MediumcupsDebianipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values...9.8 CriticalcupsDebianThe cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI...5.0 MediumcupsDebianThe cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to...2.6 LowcupsDebianThe _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1...6.8 MediumcupsDebianThe cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as...4.3 MediumcupsDebianCross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as...6.0 MediumcupsDebianUse-after-free vulnerability in the abstract file-descriptor handling interface in the...7.5 HighcupsDebianThe _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4...6.9 MediumcupsDebianUse-after-free vulnerability in the abstract file-descriptor handling interface in the...7.5 HighcupsDebianThe web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other...4.3 MediumcupsDebianThe directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote...5.0 MediumcupsDebianMultiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in...6.8 MediumcupsDebianThe ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize...7.5 HighcupsDebianThe web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client...6.4 MediumcupsDebianInteger overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote...6.8 MediumcupsDebianpstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the...6.9 MediumcupsDebianInteger overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote...7.5 HighcupsDebianThe web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is...10.0 HighcupsDebiancupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a...7.5 HighcupsDebianInteger overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote...6.8 MediumcupsDebianHeap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows...7.5 HighcupsDebianThe Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers...10.0 HighcupsDebianThe scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a...2.1 LowcupsDebianMultiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3...4.3 MediumcupsDebianBuffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an...5.8 MediumcupsDebianMultiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow...10.0 HighcupsDebianHeap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions...9.3 HighcupsDebianDouble free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote...10.0 HighcupsDebianInteger underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS...9.3 HighcupsDebianBuffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary...7.2 HighcupsDebianpdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary...4.9 MediumcupsDebianHeap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3...9.3 HighcupsDebianInteger overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote...9.3 HighcupsDebianArray index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3...7.6 HighcupsDebianOff-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to...10.0 HighcupsDebianThe CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows...5.0 MediumcupsDebianThe CUPS service on multiple platforms allows remote attackers to cause a denial of service ...5.0 Medium- Show moreLoading…