CVE-2008-1373

Published: 4 April 2008

Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.

Priority

Status

Package	Release	Status
cupsys Launchpad, Ubuntu, Debian	dapper	Released (1.2.2-0ubuntu0.6.06.8)
	edgy	Released (1.2.4-2ubuntu3.3)
	feisty	Released (1.2.8-0ubuntu8.3)
	gutsy	Released (1.3.2-1ubuntu7.6)
	upstream	Needs triage

References

http://www.cups.org/str.php?L2765
https://ubuntu.com/security/notices/USN-598-1
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1373
NVD
Launchpad
Debian

Join the discussion

Ubuntu security updates mailing list
Security announcements mailing list

Canonical is offering Extended Security Maintenance

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›

CVE-2008-1373

Low

Status

References

Join the discussion

Canonical is offering Extended Security Maintenance

Further reading