CVE-2007-5849 Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that tr...
HighCVSS 9.3
EPSS 13.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| easy software products cups | = 1.2.4 | No fix listed |
| easy software products cups | = 1.2.9 | No fix listed |
| easy software products cups | = 1.2.10 | No fix listed |
| easy software products cups | = 1.2.12 | No fix listed |
| easy software products cups | = 1.3.3 | No fix listed |
| debian/cups(Debian:12) | < 1.3.5-1 | 1.3.5-1 |
| debian/cups(Debian:13) | < 1.3.5-1 | 1.3.5-1 |
| debian/cups(Debian:14) | < 1.3.5-1 | 1.3.5-1 |
References
- Debian Security Tracker CVE-2007-5849 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.gentoo.org
- docs.info.apple.com
- APPLE-SA-2007-12-17 vendor-advisory
- SUSE-SA:2008:002 vendor-advisory
- 28113 third-party-advisory vendor-advisory
- 28129 third-party-advisory vendor-advisory
- 28136 third-party-advisory vendor-advisory
- 28200 third-party-advisory vendor-advisory
- 28386 third-party-advisory vendor-advisory
- 28441 third-party-advisory vendor-advisory
- 28636 third-party-advisory vendor-advisory
- 28676 third-party-advisory vendor-advisory
- www.cups.org
- DSA-1437 vendor-advisory
- GLSA-200712-14 vendor-advisory
- MDVSA-2008:036 vendor-advisory
- SUSE-SR:2008:002 vendor-advisory
- 26910 vdb-entry
- 26917 vdb-entry
- USN-563-1 vendor-advisory
- TA07-352A third-party-advisory us-government-resource
- ADV-2007-4238 vdb-entry vendor-advisory
- ADV-2007-4242 vdb-entry vendor-advisory
- macos-snmp-bo(39097) vdb-entry
- cups-asn1getstring-bo(39101) vdb-entry
- FEDORA-2008-0322 vendor-advisory