CVE-2008-5286

CVE-2008-5286 describes an integer overflow vulnerability in the _cupsImageReadPNG function within CUPS versions 1.1.17 through 1.3.9, including Apple CUPS. This flaw allows remote attackers to execute arbitrary code by supplying a specially crafted PNG image with an excessively large height value, which bypasses existing validation and leads to a buffer overflow. The vulnerability carries a CVSS score of 7.5, indicating a high severity with a network attack vector, low attack complexity, and potential for partial impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.