diff options
| author | delphij <delphij@FreeBSD.org> | 2007-11-09 15:51:42 +0800 |
|---|---|---|
| committer | delphij <delphij@FreeBSD.org> | 2007-11-09 15:51:42 +0800 |
| commit | 5b081f4f32e105aa7f5a787629e4cb49e7c67f85 (patch) | |
| tree | 6a3408712b91d3c15053cddf120fef4c61117073 /security/vuxml | |
| parent | 646a109ba67c3230cd176cd7843a6e1ad31cf3a8 (diff) | |
| download | freebsd-ports-gnome-5b081f4f32e105aa7f5a787629e4cb49e7c67f85.tar.gz freebsd-ports-gnome-5b081f4f32e105aa7f5a787629e4cb49e7c67f85.tar.zst freebsd-ports-gnome-5b081f4f32e105aa7f5a787629e4cb49e7c67f85.zip | |
Document cups-base remote buffer overflow vulnerability.
Approved by: portmgr (ports-security blanket)
Diffstat (limited to 'security/vuxml')
| -rw-r--r-- | security/vuxml/vuln.xml | 33 |
1 files changed, 33 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index f340ce1a14a9..580307f6a15b 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,39 @@ Note: Please add new entries to the beginning of this file. --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="8dd9722c-8e97-11dc-b8f6-001c2514716c"> + <topic>cups -- off-by-one buffer overflow</topic> + <affects> + <package> + <name>cups-base</name> + <range><lt>1.3.4</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>Secunia reports:</p> + <blockquote cite="http://secunia.com/advisories/27233"> + <p>Secunia Research has discovered a vulnerability in CUPS, which can be + exploited by malicious people to compromise a vulnerable system.</p> + <p>The vulnerability is caused due to a boundary error within the "ippReadIO()" + function in cups/ipp.c when processing IPP (Internet Printing Protocol) tags. + This can be exploited to overwrite one byte on the stack with a zero by sending + an IPP request containing specially crafted "textWithLanguage" or + "nameWithLanguage" tags.</p> + <p>Successful exploitation allows execution of arbitrary code.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2007-4351</cvename> + <url>http://secunia.com/secunia_research/2007-76/</url> + </references> + <dates> + <discovery>2007-11-06</discovery> + <entry>2007-11-09</entry> + </dates> + </vuln> + <vuln vid="5b47c279-8cb5-11dc-8878-0016179b2dd5"> <topic>perl -- regular expressions unicode data buffer overflow</topic> <affects> |