Description
Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2008-3640.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 3 | cups +2 | 1:1.1.17-13.3.56 | RHSA-2009:0308 |
Advisories 1
- RHSA-2009:0308 Red Hat Security Advisory: cups security update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- cups-texttops-writeprolog-bo(48977) vdb-entry
- 33995 third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2009-064.htm
- https://bugzilla.redhat.com/show_bug.cgi?id=486052
- oval:org.mitre.oval:def:9968 vdb-entry signature
- RHSA-2009:0308 vendor-advisory