Ubuntu
cupsys package

  1. Bug #210718
  2. Comment #4

Comment 4 for bug 210718

Revision history for this message
In , Tomas (tomas-redhat-bugs) wrote :

It was discovered that GIF parsing code used by CUPS printing system is affected
by similar issue as GIF parsers used by gd / netpbm / tk / SDL_image.

Value of code_size read from GIF image is not properly validate before being
used to initialize table array in gif_read_lzw(), causing a static buffer overflow.

Issue is similar to:
CVE-2006-4484 (gd), CVE-2007-6697 (SDL_image), CVE-2008-0553 (tk), CVE-2008-0554
(netpbm)