Description
Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an incomplete fix for CVE-2004-0888.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | cups +2 | 1:1.1.22-0.rc1.9.20.2.el4_6.6 | RHSA-2008:0206 |
| RHEL 3 | cups +2 | 1:1.1.17-13.3.52 | RHSA-2008:0206 |
Advisories 1
- RHSA-2008:0206 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2008:0206 vendor-advisory
- 31388 third-party-advisory
- 20080806 rPSA-2008-0245-1 cups mailing-list
- 29630 third-party-advisory
- https://issues.rpath.com/browse/RPL-2390
- oval:org.mitre.oval:def:9636 vdb-entry signature
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0245
- cups-pdftops-bo(41758) vdb-entry