CVE-2008-0047: Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when…

PriorityP343critical9.3CVSS 2.0

AVNACMAuNCCICAC

EPSS

6.77%

93.3th percentile

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
apple	cups	>= 0 < 1.3.6-3	1.3.6-3
apple	cups	>= 0 < 1.3.6-3	1.3.6-3
apple	cups	>= 0 < 1.3.6-3	1.3.6-3
apple	cups	>= 0 < 1.3.6-3	1.3.6-3
cups	cups	—	—
debian	cups	< cups 1.3.6-3 (bookworm)	cups 1.3.6-3 (bookworm)

CVSS provenance

nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C

osv9.3CRITICAL

vendor_debian9.3MEDIUM

vendor_redhat9.3CRITICAL

vendor_ubuntu9.3CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.