Fluid Attacks Database

Description

Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	cups	>=0 <1.7.5-11	1.7.5-11
debian 12	cups	>=0 <1.7.5-11	1.7.5-11
debian 13	cups	>=0 <1.7.5-11	1.7.5-11
debian 14	cups	>=0 <1.7.5-11	1.7.5-11
rpm rhel7	cups	<1:1.6.3-17.el7_1.1	1:1.6.3-17.el7_1.1
rpm rhel6	cups	<1:1.4.2-67.el6_6.1	1:1.4.2-67.el6_6.1
rpm rhel5	cups	-	-

Aliases

1. CVE-2014-96792. NVD-2014-96793. OSV-DEBIAN-2014-96794. OSV-2014-96795. SECURITY-TRACKER-CVE-2014-9679

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.