CVE-2008-0047: Cups

High severity, CVSS 9.3. EPSS: 6.8% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac OS X 10.5.2, when printer sharing is enabled, allows remote attackers to execute arbitrary code via crafted search expressions.

Affected products

• Cups Cups: version 1.3.5 only

Published 2008-03-18. Last modified 2026-06-16.