CVE-2004-1267

Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows remote attackers to execute arbitrary code via a crafted HPGL file.

Score

CVSS 2.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2005-01-10

Last modified

2024-08-08

Weaknesses

CWE-119

Affected products

• Cups (Easy Software Products)
• Fedora Core (Redhat)

References

• http://tigger.uic.edu/~jlongs2/holes/cups.txt
• http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:008
• http://www.redhat.com/support/errata/RHSA-2005-013.html
• http://www.redhat.com/support/errata/RHSA-2005-053.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18604
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10620
• https://usn.ubuntu.com/50-1/