Home > Vulnerability Database > CVE-2008-3641

Mend.io Vulnerability Database

CVE-2008-3641

Date: October 10, 2008

The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.

Severity Score

9.8

Related Resources (40)

Url: https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html

Url: http://secunia.com/advisories/32331

Url: http://www.zerodayinitiative.com/advisories/ZDI-08-067

Url: http://secunia.com/advisories/33568

Url: https://access.redhat.com/security/cve/CVE-2008-3641

Url: http://secunia.com/advisories/33085

Url: http://secunia.com/advisories/32292

Url: http://www.securitytracker.com/id?1021031

Url: http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml

Url: http://secunia.com/advisories/32316

Url: http://www.mandriva.com/security/advisories?name=MDVSA-2008:211

Url: http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html

Url: http://support.apple.com/kb/HT3216

Url: http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm

Url: https://nvd.nist.gov/vuln/detail/CVE-2008-3641

Url: http://www.vupen.com/english/advisories/2009/1568

Url: http://www.vupen.com/english/advisories/2008/2782

Url: http://www.vupen.com/english/advisories/2008/2780

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/45779

Url: http://secunia.com/advisories/32222

Url: http://secunia.com/advisories/33111

Url: http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1

Url: http://secunia.com/advisories/32284

Url: http://secunia.com/advisories/32084

Url: http://secunia.com/advisories/32226

Url: https://usn.ubuntu.com/656-1/

Url: http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Url: https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html

Url: http://www.cups.org/str.php?L2911

Url: http://www.securityfocus.com/bid/31681

Url: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9666

Url: http://www.debian.org/security/2008/dsa-1656

Url: http://www.vupen.com/english/advisories/2008/3401

Url: http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html

Url: http://www.securityfocus.com/archive/1/497221/100/0/threaded

Url: http://www.cups.org/articles.php?L575

Url: http://www.securityfocus.com/bid/31688

Url: http://www.redhat.com/support/errata/RHSA-2008-0937.html

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2008-3641

Url: https://www.mend.io/vulnerability-database/CVE-2008-3641

Severity Score

9.8

Weakness Type (CWE)

Resource Management Errors

CWE-399

CVSS v3.1

Base Score:	9.8
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	HIGH
Integrity (I):	HIGH
Availability (A):	HIGH

CVSS v2

Base Score:	10.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	COMPLETE
Integrity (I):	COMPLETE
Availability (A):	COMPLETE
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2008-3641

Date: October 10, 2008

Severity Score

Related Resources (40)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?