easy software products vulnerabilities

Recent CVEs affecting easy software products products. 35 tracked.

easy software products has 35 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2008-04-04. Highest priority: CVE-2002-1383 (score 64/100).

• CVE-2008-1373 MEDIUM 5.8 DOWNGRADE Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact v
• CVE-2008-0597 MEDIUM 5.0 DOWNGRADE Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to ca
• CVE-2008-0596 MEDIUM 5.0 DOWNGRADE Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of s
• CVE-2007-5849 HIGH 9.3 DOWNGRADE Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1
• CVE-2005-3626 MEDIUM 5.0 DOWNGRADE DOWNGRADE Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allow
• CVE-2005-3625 HIGH 10.0 DOWNGRADE DOWNGRADE Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allow
• CVE-2005-3624 MEDIUM 5.0 DOWNGRADE DOWNGRADE The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS
• CVE-2005-2874 MEDIUM 5.0 DOWNGRADE The is_path_absolute function in scheduler/client.c for the daemon in CUPS before 1.1.23 allows remote attacke
• CVE-2005-2526 MEDIUM 5.0 DOWNGRADE MITIGATE CUPS in Mac OS X 10.3.9 and 10.4.2 allows remote attackers to cause a denial of service (CPU consumption) by s
• CVE-2005-2525 MEDIUM 5.0 DOWNGRADE MITIGATE CUPS in Mac OS X 10.3.9 and 10.4.2 does not properly close file descriptors when handling multiple simultaneou
• CVE-2005-0206 HIGH 7.5 DOWNGRADE DOWNGRADE The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit ar
• CVE-2004-1270 LOW 2.1 DOWNGRADE MITIGATE lppasswd in CUPS 1.1.22, when run in environments that do not ensure that file descriptors 0, 1, and 2 are ope
• CVE-2004-1269 MEDIUM 5.0 DOWNGRADE MITIGATE lppasswd in CUPS 1.1.22 does not remove the passwd.new file if it encounters a file-size resource limit while
• CVE-2004-1268 LOW 2.1 DOWNGRADE MITIGATE lppasswd in CUPS 1.1.22 ignores write errors when modifying the CUPS passwd file, which allows local users to
• CVE-2004-1267 MEDIUM 6.5 DOWNGRADE MITIGATE Buffer overflow in the ParseCommand function in hpgl-input.c in the hpgltops program for CUPS 1.1.22 allows re
• CVE-2004-1125 HIGH 9.3 DOWNGRADE DOWNGRADE Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such
• CVE-2004-0927 MEDIUM 5.0 DOWNGRADE MITIGATE ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, wh
• CVE-2004-0926 HIGH 10.0 DOWNGRADE MITIGATE Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to ex
• CVE-2004-0924 MEDIUM 5.0 DOWNGRADE MITIGATE NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as be
• CVE-2004-0923 LOW 2.1 DOWNGRADE MITIGATE CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allow
• CVE-2004-0889 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attac
• CVE-2004-0888 HIGH 10.0 DOWNGRADE DOWNGRADE Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and
• CVE-2004-0558 MEDIUM 5.0 UPGRADE The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a d
• CVE-2003-0788 MEDIUM 5.0 DOWNGRADE Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1.19 allows remo
• CVE-2002-1384 HIGH 7.2 DOWNGRADE DOWNGRADE Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local us
• CVE-2002-1383 HIGH 10.0 DOWNGRADE MITIGATE Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers
• CVE-2002-1371 HIGH 7.5 DOWNGRADE MITIGATE filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for ze
• CVE-2002-1369 HIGH 10.0 DOWNGRADE MITIGATE jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function
• CVE-2002-1368 HIGH 7.5 DOWNGRADE MITIGATE Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service
• CVE-2002-1367 HIGH 10.0 DOWNGRADE MITIGATE Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authe
• CVE-2002-1366 MEDIUM 6.2 DOWNGRADE MITIGATE Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows local users with lp privileges to create or ov
• CVE-2002-0063 HIGH 7.5 UPGRADE Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via lo
• CVE-2001-1333 LOW 1.2 UPGRADE Linux CUPS before 1.1.6 does not securely handle temporary files, possibly due to a symlink vulnerability that
• CVE-2001-1332 HIGH 7.5 UPGRADE Buffer overflows in Linux CUPS before 1.1.6 may allow remote attackers to execute arbitrary code.
• CVE-2001-0194 HIGH 10.0 UPGRADE Buffer overflow in httpGets function in CUPS 1.1.5 allows remote attackers to execute arbitrary commands via a

FAQ

How do I fix easy software products vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is easy software products being exploited right now?

None of the tracked easy software products CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which easy software products CVE should I patch first?

CVE-2002-1383 currently ranks highest (64/100): Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers .

Products

• cups

RSS feed for easy software products · ← Back to latest CVEs