p PatchFirst

CVE-2009-0163

CVE-2009-0163

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.

EPSS 4.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • cups Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.3.10-1

    Update to 1.3.10-1

  • cups Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.3.10-1

    Update to 1.3.10-1

  • cups Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.3.10-1

    Update to 1.3.10-1

Original sources

Check your server →