← Vulnerability feed

Vulnerability record · CVE-2008-0053 · published 18 March 2008

CVE-2008-0053: Apple cups memory buffer overflow vulnerability

Apple · Cups

Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.

10.0 CVSS 2.0 High EPSS 8.3% · top 5.3% CWE-119 · Memory buffer overflow
10.0CVSS 2.0 base score
8.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
52References
16 Jun 2026Last modified by NVD

Description

Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a crafted HP-GL/2 file.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://docs.info.apple.com/article.html?artnum=307562
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html Patch
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html
http://secunia.com/advisories/29420 Vendor Advisory
http://secunia.com/advisories/29573 Vendor Advisory
http://secunia.com/advisories/29603 Vendor Advisory
http://secunia.com/advisories/29630 Vendor Advisory
http://secunia.com/advisories/29634 Vendor Advisory
http://secunia.com/advisories/29655 Vendor Advisory
http://secunia.com/advisories/29659 Vendor Advisory
http://secunia.com/advisories/29750 Vendor Advisory
http://secunia.com/advisories/31324 Vendor Advisory
http://security.gentoo.org/glsa/glsa-200804-01.xml
http://www.debian.org/security/2008/dsa-1625
http://www.mandriva.com/security/advisories?name=MDVSA-2008:081
http://www.redhat.com/support/errata/RHSA-2008-0192.html
http://www.redhat.com/support/errata/RHSA-2008-0206.html
http://www.securityfocus.com/bid/28304
http://www.securityfocus.com/bid/28334
http://www.securitytracker.com/id?1019672
http://www.ubuntu.com/usn/usn-598-1
http://www.us-cert.gov/cas/techalerts/TA08-079A.html US Government Resource
http://www.vupen.com/english/advisories/2008/0924/references Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41272
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10356
https://www.redhat.com/archives/fedora-package-announce/2008-April/msg00105.html
http://docs.info.apple.com/article.html?artnum=307562
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html Patch
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00003.html
http://secunia.com/advisories/29420 Vendor Advisory
http://secunia.com/advisories/29573 Vendor Advisory
http://secunia.com/advisories/29603 Vendor Advisory
http://secunia.com/advisories/29630 Vendor Advisory
http://secunia.com/advisories/29634 Vendor Advisory
http://secunia.com/advisories/29655 Vendor Advisory
http://secunia.com/advisories/29659 Vendor Advisory
http://secunia.com/advisories/29750 Vendor Advisory
http://secunia.com/advisories/31324 Vendor Advisory
http://security.gentoo.org/glsa/glsa-200804-01.xml
http://www.debian.org/security/2008/dsa-1625

Track CVE-2008-0053 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-5184Apple cups vulnerabilityThe web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easie…EPSS 3.7%10.0CVE-2008-3641Apple cups vulnerabilityThe Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and …EPSS 24%9.8CVE-2012-6094Apple cups incorrect authorization vulnerabilitycups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the systemEPSS 2.1%9.8CVE-2010-2941Apple cups use after free vulnerabilityipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote a…EPSS 6.4%9.8CVE-2004-2154Apple cups vulnerabilityCUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name …EPSS 2.1%7.5CVE-2017-18190Apple cups authentication bypass by spoofing vulnerabilityA localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP c…EPSS 2.9%7.5CVE-2010-3702Apple cups null pointer dereference vulnerabilityThe Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and pos…EPSS 2.8%7.5CVE-2010-0302Apple cups use after free vulnerabilityUse-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler …EPSS 2.6%

Source: NIST National Vulnerability Database (record CVE-2008-0053), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.