Secunia

Description

SUSE has issued an update for cups. This fixes some vulnerabilities, which can be exploited by malicious users or malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system.

1) A signedness error exists within the processing of ASN1 encoded strings from SNMP responses.

For more information:
SA28129

The vulnerability affects openSUSE 10.2 and 10.3 only.

2) An unspecified boundary error can be exploited by a user with administrator privileges to cause a stack-based buffer overflow via a specially crafted URI.

This is related to vulnerability #5 in:
SA28136

Solution
Apply updated packages.
Further details available in Customer Area

Original Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00003.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area