CVE-2015-1159

概要

参考情報

• googleprojectzero.blogspot.in/2015/06/owning-internet-printing-case-study-in.html · Technical Description
• kb.juniper.net/InfoCenter/index · Third Party Advisory
• lists.opensuse.org/opensuse-security-announce/2015-06/msg00003.html
• lists.opensuse.org/opensuse-security-announce/2015-06/msg00006.html
• lists.opensuse.org/opensuse-security-announce/2015-06/msg00010.html
• rhn.redhat.com/errata/RHSA-2015-1123.html
• cups.org/blog.php · Vendor Advisory
• debian.org/security/2015/dsa-3283
• kb.cert.org/vuls/id/810572 · Third Party Advisory
• securityfocus.com/bid/75106 · Third Party Advisory
• securitytracker.com/id/1032556
• ubuntu.com/usn/USN-2629-1
• bugzilla.opensuse.org/show_bug.cgi · Issue Tracking
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• code.google.com/p/google-security-research/issues/detail · Exploit
• security.gentoo.org/glsa/201510-07 · Third Party Advisory
• cups.org/str.php · Vendor Advisory

cups のその他の脆弱性

• CVE-2014-8166高 8.8The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attacke…
• CVE-2015-1158緊急 10.0The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-…
• CVE-2008-1722中 4.3Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (c…
• CVE-2008-0047緊急 9.3Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac O…
• CVE-2008-0882緊急 10.0Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon cra…