Apple Cups vulnerabilities

• apple macos, cups, mac os x +2 more +4 more A logic issue was addressed with improved state management. This issue is fixed in Security... CVE-2022-26691 Fix available 6.7 MediumMay 26, 2022
• apple cups, debian linux +1 more cups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which... CVE-2012-6094 9.8 CriticalDecember 20, 2019
• apple cups The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing... CVE-2018-4300 Fix available 5.9 MediumApril 3, 2019
• apple cups The add_job function in scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is enabled, can... CVE-2017-18248 Fix available 5.3 MediumMarch 26, 2018
• apple cups, canonical ubuntu linux, debian linux +2 more A localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2... CVE-2017-18190 Fix available 7.5 HighFebruary 16, 2018
• apple cups Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2... CVE-2014-9679 Fix available 6.8 MediumJuly 29, 2014
• apple cups, canonical ubuntu linux +1 more The web interface in CUPS before 2.0 does not check that files have world-readable permissions,... CVE-2014-5031 Fix available 5.0 MediumJuly 27, 2014
• apple cups, canonical ubuntu linux +1 more CUPS before 2.0 allows local users to read arbitrary files via a symlink attack on (1) index.html... CVE-2014-5030 Fix available 1.9 LowJuly 27, 2014
• apple cups, canonical ubuntu linux +1 more The web interface in CUPS 1.7.4 allows local users in the lp group to read arbitrary files via a... CVE-2014-5029 Fix available 1.5 LowJuly 27, 2014
• apple cups, canonical ubuntu linux, fedoraproject fedora +2 more The web interface in CUPS before 1.7.4 allows local users in the lp group to read arbitrary files... CVE-2014-3537 Fix available 1.2 LowJuly 17, 2014
• apple cups Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System ... CVE-2014-2856 Fix available 4.3 MediumApril 18, 2014
• apple cups, canonical ubuntu linux +1 more lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read... CVE-2013-6891 Fix available 1.2 LowJanuary 21, 2014
• apple cups CUPS 1.4.4, when running in certain Linux distributions such as Debian GNU/Linux, stores the web... CVE-2012-5519 Public exploitFix available 7.2 HighNovember 20, 2012
• apple cups The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly... CVE-2011-3170 Fix available 5.1 MediumAugust 19, 2011
• apple cups, gimp, swi-prolog +2 more The LZW decompressor in the LWZReadByte function in giftoppm.c in the David Koblas GIF decoder in... CVE-2011-2896 Fix available EPSS 12.0% 5.1 MediumAugust 19, 2011
• apple cups, mac os x, mac os x server +10 more +12 more ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values... CVE-2010-2941 Fix available 9.8 CriticalNovember 5, 2010
• apple cups, freedesktop poppler, xpdfreader xpdf +8 more +10 more The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly... CVE-2010-3702 Fix available 7.5 HighOctober 12, 2010
• apple cups The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI... CVE-2010-2432 Fix available 5.0 MediumJune 22, 2010
• apple cups The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to... CVE-2010-2431 Fix available 2.6 LowJune 22, 2010
• apple cups The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1... CVE-2010-0542 Fix available 6.8 MediumJune 21, 2010
• apple cups The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as... CVE-2010-1748 Public exploitFix available 4.3 MediumJune 17, 2010
• apple cups, mac os x, mac os x server +7 more +9 more Use-after-free vulnerability in the abstract file-descriptor handling interface in the... CVE-2010-0302 Fix available 7.5 HighMarch 5, 2010
• apple cups The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4... CVE-2010-0393 Fix available 6.9 MediumMarch 3, 2010
• apple cups, mac os x, mac os x server +4 more +6 more Use-after-free vulnerability in the abstract file-descriptor handling interface in the... CVE-2009-3553 Fix available 7.5 HighNovember 20, 2009
• apple cups The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote... CVE-2009-1196 Fix available 5.0 MediumJune 9, 2009
• apple cups Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in... CVE-2009-0791 Fix available 6.8 MediumJune 9, 2009
• apple cups, mac os x, mac os x server +4 more +6 more The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize... CVE-2009-0949 Public exploitFix available EPSS 19.6% 7.5 HighJune 2, 2009
• apple cups The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client... CVE-2009-0164 Fix available 6.4 MediumApril 24, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more The JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6,... CVE-2009-1183 Fix available 4.3 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more Multiple buffer overflows in the JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and... CVE-2009-1182 Fix available 7.5 HighApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and... CVE-2009-1181 Fix available 4.3 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and... CVE-2009-1180 Fix available 6.8 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier,... CVE-2009-1179 Fix available 6.8 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more Multiple "input validation flaws" in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9... CVE-2009-0800 Fix available 6.8 MediumApril 23, 2009
• apple cups, foolabs xpdf, poppler +1 more +3 more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and... CVE-2009-0799 Fix available 4.3 MediumApril 23, 2009
• apple cups, foolabs xpdf, glyphandcog xpdfreader +2 more Heap-based buffer overflow in Xpdf 3.02pl2 and earlier, CUPS 1.3.9, and probably other products,... CVE-2009-0195 Fix available 6.8 MediumApril 23, 2009
• apple cups, foolabs xpdf, glyphandcog xpdfreader +1 more +3 more The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows... CVE-2009-0166 Fix available 4.3 MediumApril 23, 2009
• apple cups, foolabs xpdf, glyphandcog xpdfreader +2 more Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and... CVE-2009-0147 Fix available 4.3 MediumApril 23, 2009
• apple cups, foolabs xpdf, glyphandcog xpdfreader +2 more Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and... CVE-2009-0146 Fix available 4.3 MediumApril 23, 2009
• apple cups Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote... CVE-2009-0163 Fix available 6.8 MediumApril 17, 2009
• apple cups Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise... CVE-2009-0577 Fix available 6.8 MediumFebruary 20, 2009
• apple cups CUPS on Mandriva Linux 2008.0, 2008.1, 2009.0, Corporate Server (CS) 3.0 and 4.0, and Multi... CVE-2009-0032 6.9 MediumJanuary 27, 2009
• apple cups pstopdf in CUPS 1.3.8 allows local users to overwrite arbitrary files via a symlink attack on the... CVE-2008-5377 Public exploitFix available 6.9 MediumDecember 8, 2008
• apple cups Integer overflow in the _cupsImageReadPNG function in CUPS 1.1.17 through 1.3.9 allows remote... CVE-2008-5286 Fix available 7.5 HighDecember 1, 2008
• apple cups The web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is... CVE-2008-5184 Fix available 10.0 HighNovember 21, 2008
• apple cups, mac os x, mac os x server +2 more +4 more cupsd in CUPS 1.3.9 and earlier allows local users, and possibly remote attackers, to cause a... CVE-2008-5183 Public exploitFix available 7.5 HighNovember 21, 2008
• apple cups Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote... CVE-2008-3640 Fix available 6.8 MediumOctober 14, 2008
• apple cups Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows... CVE-2008-3639 Fix available 7.5 HighOctober 14, 2008
• apple cups The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers... CVE-2008-3641 Public exploitFix available EPSS 24.1% 10.0 HighOctober 10, 2008
• apple cups The scheduler in CUPS in Apple Mac OS X 10.5 before 10.5.3, when debug logging is enabled and a... CVE-2008-1033 Fix available 2.1 LowJune 2, 2008
• Show olderLoading…