CVE-2008-1373

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-04-04 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to CVE-2006-4484.

Affected products

Easy Software Products Cups: 1.3.6

References

http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html
http://secunia.com/advisories/29573
http://secunia.com/advisories/29603
http://secunia.com/advisories/29630
http://secunia.com/advisories/29634
http://secunia.com/advisories/29655
http://secunia.com/advisories/29659
http://secunia.com/advisories/29661
http://secunia.com/advisories/29750
http://secunia.com/advisories/31324
http://security.gentoo.org/glsa/glsa-200804-01.xml
http://wiki.rpath.com/Advisories:rPSA-2008-0136

Get alerted when CVE-2008-1373 or the next vulnerability affects your stack