← Database

CVE-2008-3639

HIGH CVSS: 7.5 Published: 2008-10-14 Modified: 2026-06-16

Description

Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.

Affected Platforms

Apple Cups

Weakness Type

CWE-119

References