CVE-2008-3639

Heap-based buffer overflow in the read_rle16 function in imagetops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via an SGI image with malformed Run Length Encoded (RLE) data containing a small image and a large row count.

Date published : 2008-10-14

http://www.securityfocus.com/bid/31690

http://support.avaya.com/elmodocs2/security/ASA-2008-470.htm