CVE-2008-0882

cups: double free vulnerability in process_browse_data()

Published Feb 21, 2008 CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Description
Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port (631/udp), related to an unspecified manipulation of a remote printer. NOTE: some of these details are obtained from third party information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1530-1 New cupsys packages fix multiple vulnerabilities
Ubuntu USN Ubuntu USN USN-598-1 CUPS vulnerabilities
References
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 8:01 AM
Reserved
Feb 21, 2008, 12:00 AM
Status
Modified
Published
Feb 21, 2008, 7:44 PM
Modified
Jun 16, 2026, 10:50 PM
Severity
Important
Public date
Jan 7, 2008, 12:00 AM