← Vulnerability feed

Vulnerability record · CVE-2008-3641 · published 10 October 2008

CVE-2008-3641: Apple cups vulnerability

Apple · Cups

The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.

10.0 CVSS 2.0 High EPSS 24% · top 2.2% CWE-399 · CWE-399
10.0CVSS 2.0 base score
24%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
72References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
http://secunia.com/advisories/32084 Vendor Advisory
http://secunia.com/advisories/32222 Vendor Advisory
http://secunia.com/advisories/32226 Vendor Advisory
http://secunia.com/advisories/32284 Vendor Advisory
http://secunia.com/advisories/32292 Vendor Advisory
http://secunia.com/advisories/32316 Vendor Advisory
http://secunia.com/advisories/32331
http://secunia.com/advisories/33085
http://secunia.com/advisories/33111
http://secunia.com/advisories/33568
http://sunsolve.sun.com/search/document.do?assetkey=1-26-261088-1
http://support.apple.com/kb/HT3216 Vendor Advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm
http://www.cups.org/articles.php?L575
http://www.cups.org/str.php?L2911 Exploit
http://www.debian.org/security/2008/dsa-1656
http://www.gentoo.org/security/en/glsa/glsa-200812-11.xml
http://www.mandriva.com/security/advisories?name=MDVSA-2008:211
http://www.redhat.com/support/errata/RHSA-2008-0937.html
http://www.securityfocus.com/archive/1/497221/100/0/threaded
http://www.securityfocus.com/bid/31681 Patch
http://www.securityfocus.com/bid/31688
http://www.securitytracker.com/id?1021031
http://www.vupen.com/english/advisories/2008/2780
http://www.vupen.com/english/advisories/2008/2782
http://www.vupen.com/english/advisories/2008/3401
http://www.vupen.com/english/advisories/2009/1568
http://www.zerodayinitiative.com/advisories/ZDI-08-067
https://exchange.xforce.ibmcloud.com/vulnerabilities/45779
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9666
https://usn.ubuntu.com/656-1/
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00331.html
https://www.redhat.com/archives/fedora-package-announce/2008-October/msg00380.html
http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2009-01/msg00004.html
http://secunia.com/advisories/32084 Vendor Advisory

Track CVE-2008-3641 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2008-5184Apple cups vulnerabilityThe web interface (cgi-bin/admin.c) in CUPS before 1.3.8 uses the guest username when a user is not logged on to the web server, which makes it easie…EPSS 3.7%10.0CVE-2008-0053Apple cups memory buffer overflow vulnerabilityMultiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code via a craft…EPSS 8.3%9.8CVE-2012-6094Apple cups incorrect authorization vulnerabilitycups (Common Unix Printing System) 'Listen localhost:631' option not honored correctly which could provide unauthorized access to the systemEPSS 2.1%9.8CVE-2010-2941Apple cups use after free vulnerabilityipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote a…EPSS 6.4%9.8CVE-2004-2154Apple cups vulnerabilityCUPS before 1.1.21rc1 treats a Location directive in cupsd.conf as case sensitive, which allows attackers to bypass intended ACLs via a printer name …EPSS 2.1%7.5CVE-2017-18190Apple cups authentication bypass by spoofing vulnerabilityA localhost.localdomain whitelist entry in valid_host() in scheduler/client.c in CUPS before 2.2.2 allows remote attackers to execute arbitrary IPP c…EPSS 2.9%7.5CVE-2010-3702Apple cups null pointer dereference vulnerabilityThe Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15.1, CUPS, kdegraphics, and pos…EPSS 2.8%7.5CVE-2010-0302Apple cups use after free vulnerabilityUse-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler …EPSS 2.6%

Source: NIST National Vulnerability Database (record CVE-2008-3641), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.