CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing System(CUPS)是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当解析TIFF文件时，_cupsImageReadTIFF()函数没有正确验证来自文件爱你的'height'值，此值用于算术计算来决定动态堆缓冲区大小，通过提供超大值，可导致触发堆的缓冲区溢出，可能以应用程序权限执行任意指令。 Easy Software Products CUPS 1.3.9 Easy Software Products CUPS 1.3.8 Easy Software Products CUPS 1.3.7 Easy Software Products CUPS 1.3.6 Easy Software Products CUPS 1.3.5 Easy Software Products CUPS 1.3.3 Easy Software Products CUPS 1.3.2 Easy Software Products CUPS 1.2.12 Easy Software Products CUPS 1.2.10 Easy Software Products CUPS 1.2.9 Easy Software Products CUPS 1.2.8 Easy Software Products CUPS 1.2.4 Easy Software Products CUPS 1.2.2 Easy Software Products CUPS 1.1.23 rc1 + Gentoo Linux Easy Software Products CUPS 1.1.23 + Gentoo Linux Easy Software Products CUPS 1.1.22 rc1 Easy Software Products CUPS 1.1.22 Easy Software Products CUPS 1.1.21 + MandrakeSoft Linux Mandrake 10.1 x86_64 + MandrakeSoft Linux Mandrake 10.1 Easy Software Products CUPS 1.1.20 + ALT Linux ALT Linux Compact 2.3 + ALT Linux ALT Linux Junior 2.3 + Gentoo Linux 1.4 _rc3 + Gentoo Linux 1.4 _rc2 + Gentoo Linux 1.4 _rc1 + MandrakeSoft apcupsd 2006.0 + MandrakeSoft Linux Mandrake 10.0 AMD64 + MandrakeSoft Linux Mandrake 10.0 + S.u.S.E. Linux Personal 9.1 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 Easy Software Products CUPS 1.1.19 rc5 Easy Software Products CUPS 1.1.19 + MandrakeSoft Linux Mandrake 9.2 amd64 + MandrakeSoft Linux Mandrake 9.2 + Turbolinux Appliance Server 1.0 Workgroup Edition + Turbolinux Appliance Server 1.0 Hosting Edition + Turbolinux Appliance Server Hosting Edition 1.0 + Turbolinux Appliance Server Workgroup Edition 1.0 + Turbolinux Home + Turbolinux Turbolinux Desktop 10.0 + Turbolinux Turbolinux Server 8.0 + Turbolinux Turbolinux Workstation 8.0 Easy Software Products CUPS 1.1.18 + Conectiva Linux 9.0 + MandrakeSoft Corporate Server 2.1 x86_64 + MandrakeSoft Corporate Server 2.1 + MandrakeSoft Linux Mandrake 9.0 + MandrakeSoft Multi Network Firewall 2.0 + S.u.S.E. Linux Personal 8.2 Easy Software Products CUPS 1.1.17 + RedHat Desktop 3.0 + RedHat Enterprise Linux AS 3 + RedHat Enterprise Linux ES 3 + RedHat Enterprise Linux WS 3 Easy Software Products CUPS 1.1.16 + MandrakeSoft Linux Mandrake 9.0 Easy Software Products CUPS 1.1.15 + Conectiva Linux Enterprise Edition 1.0 + S.u.S.E. Linux 8.1 Easy Software Products CUPS 1.1.14 + Conectiva Linux 8.0 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha + Debian Linux 3.0 + MandrakeSoft Linux Mandrake 8.2 ppc + MandrakeSoft Linux Mandrake 8.2 Easy Software Products CUPS 1.1.13 Easy Software Products CUPS 1.1.12 + S.u.S.E. Linux 8.0 i386 + S.u.S.E. Linux 8.0 Easy Software Products CUPS 1.1.10 + Caldera OpenLinux Server 3.1.1 + Caldera OpenLinux Workstation 3.1.1 + Conectiva Linux 7.0 + Conectiva Linux 6.0 + MandrakeSoft Linux Mandrake 8.1 ia64 + MandrakeSoft Linux Mandrake 8.1 + S.u.S.E. Linux 7.3 sparc + S.u.S.E. Linux 7.3 ppc + S.u.S.E. Linux 7.3 i386 Easy Software Products CUPS 1.1.7 Easy Software Products CUPS 1.1.6 + Caldera OpenLinux Server 3.1 + Caldera OpenLinux Workstation 3.1 + MandrakeSoft Linux Mandrake 8.0 ppc + MandrakeSoft Linux Mandrake 8.0 + S.u.S.E. Linux 7.2 i386 + S.u.S.E. Linux 7.1 x86 + S.u.S.E. Linux 7.1 sparc + S.u.S.E. Linux 7.1 ppc + S.u.S.E. Linux 7.1 alpha Easy Software Products CUPS 1.1.4 -5 Easy Software Products CUPS 1.1.4 -3 + MandrakeSoft Linux Mandrake 7.2 Easy Software Products CUPS 1.1.4 -2 + Debian Linux 2.3 Easy Software Products CUPS 1.1.4 + Debian Linux 2.3 + MandrakeSoft Linux Mandrake 7.2 Easy Software Products CUPS 1.1.1 + RedHat PowerTools 7.0 Easy Software Products CUPS 1.0.4 -8 + Debian Linux 2.2 Easy Software Products CUPS 1.0.4 + Debian Linux 2.2 DrPhibez and Nitro187 Guild FTPD 1.1.19 rc5 可参考如下补丁信息： Easy Software Products CUPS 1.0.4 -8 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.0.4 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.1 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.10 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.12 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.13 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.14 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.15 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.16 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.17 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.18 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> DrPhibez and Nitro187 Guild FTPD 1.1.19 rc5 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.19 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.19 rc5 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.20 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.21 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.22 rc1 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.22 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.23 rc1 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.23 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.4 -5 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.4 -2 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.4 -3 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.4 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.6 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.1.7 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.2.10 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.2.12 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.2.2 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.2.4 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.2.8 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.2.9 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.3.2 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.3.3 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.3.5 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.3.6 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.3.7 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.3.8 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a> Easy Software Products CUPS 1.3.9 Easy Software Products str3031.patch <a href=http://www.cups.org/strfiles/3031/str3031.patch target=_blank rel=external nofollow>http://www.cups.org/strfiles/3031/str3031.patch</a>