CVE-2008-3641 - 漏洞详情

CVE-2008-3641 (CNNVD-200810-160)

CRITICAL 有利用代码

中文标题:

Apple Mac OS X HPGL过滤器存在安全访问漏洞

英文标题:

The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to ...

CVSS分数: 10.0

发布时间: 2008-10-10 10:00:00

漏洞类型: 资源管理错误

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v4

漏洞描述

中文描述:

Mac OS X是苹果家族机器所使用的操作系统。 Apple 2008-007安全更新修复了Mac OS X中的多个安全漏洞，本地或远程攻击者可能利用这些漏洞造成多种威胁。惠普图形语言(HPGL)过滤器中存在访问检查错误，受控数据可能导致覆盖任意内存。如果启用了打印机共享的话，远程攻击者就可以以lp用户的权限执行任意代码；如果没有启用打印机共享，本地用户可以获得权限提升。

英文描述:

The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via crafted pen width and pen color opcodes that overwrite arbitrary memory.

CWE类型:

CWE-399

受影响产品

厂商	产品	版本	版本范围	平台	CPE
apple	cups	*	-	-	`cpe:2.3:a:apple:cups::::::::`
apple	cups	1.1	-	-	`cpe:2.3:a:apple:cups:1.1:::::::*`
apple	cups	1.1.1	-	-	`cpe:2.3:a:apple:cups:1.1.1:::::::*`
apple	cups	1.1.2	-	-	`cpe:2.3:a:apple:cups:1.1.2:::::::*`
apple	cups	1.1.3	-	-	`cpe:2.3:a:apple:cups:1.1.3:::::::*`
apple	cups	1.1.4	-	-	`cpe:2.3:a:apple:cups:1.1.4:::::::*`
apple	cups	1.1.5	-	-	`cpe:2.3:a:apple:cups:1.1.5:::::::*`
apple	cups	1.1.5-1	-	-	`cpe:2.3:a:apple:cups:1.1.5-1:::::::*`
apple	cups	1.1.5-2	-	-	`cpe:2.3:a:apple:cups:1.1.5-2:::::::*`
apple	cups	1.1.6	-	-	`cpe:2.3:a:apple:cups:1.1.6:::::::*`
apple	cups	1.1.6-1	-	-	`cpe:2.3:a:apple:cups:1.1.6-1:::::::*`
apple	cups	1.1.6-2	-	-	`cpe:2.3:a:apple:cups:1.1.6-2:::::::*`
apple	cups	1.1.6-3	-	-	`cpe:2.3:a:apple:cups:1.1.6-3:::::::*`
apple	cups	1.1.7	-	-	`cpe:2.3:a:apple:cups:1.1.7:::::::*`
apple	cups	1.1.8	-	-	`cpe:2.3:a:apple:cups:1.1.8:::::::*`
apple	cups	1.1.9	-	-	`cpe:2.3:a:apple:cups:1.1.9:::::::*`
apple	cups	1.1.9-1	-	-	`cpe:2.3:a:apple:cups:1.1.9-1:::::::*`
apple	cups	1.1.10	-	-	`cpe:2.3:a:apple:cups:1.1.10:::::::*`
apple	cups	1.1.10-1	-	-	`cpe:2.3:a:apple:cups:1.1.10-1:::::::*`
apple	cups	1.1.11	-	-	`cpe:2.3:a:apple:cups:1.1.11:::::::*`
apple	cups	1.1.12	-	-	`cpe:2.3:a:apple:cups:1.1.12:::::::*`
apple	cups	1.1.13	-	-	`cpe:2.3:a:apple:cups:1.1.13:::::::*`
apple	cups	1.1.14	-	-	`cpe:2.3:a:apple:cups:1.1.14:::::::*`
apple	cups	1.1.15	-	-	`cpe:2.3:a:apple:cups:1.1.15:::::::*`
apple	cups	1.1.16	-	-	`cpe:2.3:a:apple:cups:1.1.16:::::::*`
apple	cups	1.1.17	-	-	`cpe:2.3:a:apple:cups:1.1.17:::::::*`
apple	cups	1.1.18	-	-	`cpe:2.3:a:apple:cups:1.1.18:::::::*`
apple	cups	1.1.19	-	-	`cpe:2.3:a:apple:cups:1.1.19:::::::*`
apple	cups	1.1.20	-	-	`cpe:2.3:a:apple:cups:1.1.20:::::::*`
apple	cups	1.1.21	-	-	`cpe:2.3:a:apple:cups:1.1.21:::::::*`
apple	cups	1.1.22	-	-	`cpe:2.3:a:apple:cups:1.1.22:::::::*`
apple	cups	1.1.23	-	-	`cpe:2.3:a:apple:cups:1.1.23:::::::*`
apple	cups	1.2	-	-	`cpe:2.3:a:apple:cups:1.2:b1::::::`
apple	cups	1.2.0	-	-	`cpe:2.3:a:apple:cups:1.2.0:::::::*`
apple	cups	1.2.1	-	-	`cpe:2.3:a:apple:cups:1.2.1:::::::*`
apple	cups	1.2.2	-	-	`cpe:2.3:a:apple:cups:1.2.2:::::::*`
apple	cups	1.2.3	-	-	`cpe:2.3:a:apple:cups:1.2.3:::::::*`
apple	cups	1.2.4	-	-	`cpe:2.3:a:apple:cups:1.2.4:::::::*`
apple	cups	1.2.5	-	-	`cpe:2.3:a:apple:cups:1.2.5:::::::*`
apple	cups	1.2.6	-	-	`cpe:2.3:a:apple:cups:1.2.6:::::::*`
apple	cups	1.2.7	-	-	`cpe:2.3:a:apple:cups:1.2.7:::::::*`
apple	cups	1.2.8	-	-	`cpe:2.3:a:apple:cups:1.2.8:::::::*`
apple	cups	1.2.9	-	-	`cpe:2.3:a:apple:cups:1.2.9:::::::*`
apple	cups	1.2.10	-	-	`cpe:2.3:a:apple:cups:1.2.10:::::::*`
apple	cups	1.2.11	-	-	`cpe:2.3:a:apple:cups:1.2.11:::::::*`
apple	cups	1.2.12	-	-	`cpe:2.3:a:apple:cups:1.2.12:::::::*`
apple	cups	1.3	-	-	`cpe:2.3:a:apple:cups:1.3:b1::::::`
apple	cups	1.3.0	-	-	`cpe:2.3:a:apple:cups:1.3.0:::::::*`
apple	cups	1.3.1	-	-	`cpe:2.3:a:apple:cups:1.3.1:::::::*`
apple	cups	1.3.2	-	-	`cpe:2.3:a:apple:cups:1.3.2:::::::*`
apple	cups	1.3.3	-	-	`cpe:2.3:a:apple:cups:1.3.3:::::::*`
apple	cups	1.3.4	-	-	`cpe:2.3:a:apple:cups:1.3.4:::::::*`
apple	cups	1.3.5	-	-	`cpe:2.3:a:apple:cups:1.3.5:::::::*`
apple	cups	1.3.6	-	-	`cpe:2.3:a:apple:cups:1.3.6:::::::*`
apple	cups	1.3.7	-	-	`cpe:2.3:a:apple:cups:1.3.7:::::::*`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）

临时解决方案:

（暂无数据）

参考链接

261088 vendor-advisory
cve.org

访问

32284 third-party-advisory
cve.org

访问

MDVSA-2008:211 vendor-advisory
cve.org

访问

ADV-2008-2782 vdb-entry
cve.org

访问

GLSA-200812-11 vendor-advisory
cve.org

访问

32331 third-party-advisory
cve.org

访问

31681 vdb-entry
cve.org

访问

cups-hpgl-code-execution(45779) vdb-entry
cve.org

访问

33111 third-party-advisory
cve.org

访问

oval:org.mitre.oval:def:9666 vdb-entry
cve.org

访问

32292 third-party-advisory
cve.org

访问

无标题 x_refsource_MISC
cve.org

访问

ADV-2009-1568 vdb-entry
cve.org

访问

FEDORA-2008-8844 vendor-advisory
cve.org

访问

FEDORA-2008-8801 vendor-advisory
cve.org

访问

SUSE-SR:2008:021 vendor-advisory
cve.org

访问

33085 third-party-advisory
cve.org

访问

SUSE-SR:2009:002 vendor-advisory
cve.org

访问

无标题 x_refsource_CONFIRM
cve.org

访问

33568 third-party-advisory
cve.org

访问

ADV-2008-3401 vdb-entry
cve.org

访问

31688 vdb-entry
cve.org

访问

32222 third-party-advisory
cve.org

访问

32226 third-party-advisory
cve.org

访问

DSA-1656 vendor-advisory
cve.org

访问

无标题 x_refsource_CONFIRM
cve.org

访问

1021031 vdb-entry
cve.org

访问

USN-656-1 vendor-advisory
cve.org

访问

ADV-2008-2780 vdb-entry
cve.org

访问

无标题 x_refsource_CONFIRM
cve.org

访问

APPLE-SA-2008-10-09 vendor-advisory
cve.org

访问

无标题 x_refsource_CONFIRM
cve.org

访问

32084 third-party-advisory
cve.org

访问

RHSA-2008:0937 vendor-advisory
cve.org

访问

32316 third-party-advisory
cve.org

访问

20081010 ZDI-08-067: Apple CUPS 1.3.7 (HP-GL/2 filter) Remote Code Execution Vulnerability mailing-list
cve.org

访问

ExploitDB EDB-32470 EXPLOIT
exploitdb

访问

Download Exploit EDB-32470 EXPLOIT
exploitdb

访问

CVE Reference: CVE-2008-3641 ADVISORY
cve.org

访问

CVSS评分详情

10.0

CRITICAL

CVSS向量: AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS版本: 2.0

机密性

COMPLETE

完整性

COMPLETE

可用性

COMPLETE

时间信息

发布时间:

2008-10-10 10:00:00

修改时间:

2024-08-07 09:45:19

创建时间:

2025-11-11 15:32:54

更新时间:

2025-11-11 16:27:04

利用信息

此漏洞有可利用代码！

利用代码数量: 1

利用来源:

未知

数据源详情

数据源	记录ID	版本	提取时间
CVE	`cve_CVE-2008-3641`	2025-11-11 15:18:02	2025-11-11 07:32:54
NVD	`nvd_CVE-2008-3641`	2025-11-11 14:52:36	2025-11-11 07:41:40
CNNVD	`cnnvd_CNNVD-200810-160`	2025-11-11 15:08:56	2025-11-11 07:49:29
EXPLOITDB	`exploitdb_EDB-32470`	2025-11-11 15:05:26	2025-11-11 08:27:04

版本与语言

当前版本: v4

主要语言: EN

支持语言:

EN ZH

其他标识符:

安全公告

暂无安全公告信息

变更历史

v4 EXPLOITDB

2025-11-11 16:27:04

references_count: 36 → 39; tags_count: 0 → 4; data_sources: ['cnnvd', 'cve', 'nvd'] → ['cnnvd', 'cve', 'exploitdb', 'nvd']

查看详细变更

references_count: 36 -> 39
tags_count: 0 -> 4
data_sources: ['cnnvd', 'cve', 'nvd'] -> ['cnnvd', 'cve', 'exploitdb', 'nvd']

v3 CNNVD

2025-11-11 15:49:29

vulnerability_type: 未提取 → 资源管理错误; cnnvd_id: 未提取 → CNNVD-200810-160; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']

查看详细变更

vulnerability_type: 未提取 -> 资源管理错误
cnnvd_id: 未提取 -> CNNVD-200810-160
data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']

v2 NVD

2025-11-11 15:41:40

severity: SeverityLevel.MEDIUM → SeverityLevel.CRITICAL; cvss_score: 未提取 → 10.0; cvss_vector: NOT_EXTRACTED → AV:N/AC:L/Au:N/C:C/I:C/A:C; cvss_version: NOT_EXTRACTED → 2.0; affected_products_count: 0 → 55; data_sources: ['cve'] → ['cve', 'nvd']

查看详细变更

severity: SeverityLevel.MEDIUM -> SeverityLevel.CRITICAL
cvss_score: 未提取 -> 10.0
cvss_vector: NOT_EXTRACTED -> AV:N/AC:L/Au:N/C:C/I:C/A:C
cvss_version: NOT_EXTRACTED -> 2.0
affected_products_count: 0 -> 55
data_sources: ['cve'] -> ['cve', 'nvd']

CVE-2008-3641 (CNNVD-200810-160)

中文标题:

Apple Mac OS X HPGL过滤器存在安全访问漏洞

英文标题:

The Hewlett-Packard Graphics Language (HPGL) filter in CUPS before 1.3.9 allows remote attackers to ...

漏洞描述

中文描述:

英文描述:

CWE类型:

标签:

受影响产品

解决方案

中文解决方案:

英文解决方案:

临时解决方案:

参考链接

CVSS评分详情

时间信息

利用信息

数据源详情

版本与语言

安全公告

变更历史