CVE-2007-5849

Published: Dec 19, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.

Affected (5)

Products: Easy Software Products: Cups

Easy Software Products

1 product

Cups

Configuration A

5 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Easy Software Products Cups	Version 1.2.10
Easy Software Products Cups	Version 1.2.12
Easy Software Products Cups	Version 1.2.4
Easy Software Products Cups	Version 1.2.9
Easy Software Products Cups	Version 1.3.3

Running on/with	Platform Versions
Apple Mac Os X	Version 10.5.1

Related CWEs

CWE-189

References (52)

http://bugs.gentoo.org/show_bug.cgi?id=201570

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307179

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00003.html

Source: cve@mitre.org

http://secunia.com/advisories/28113

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28129

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28136

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28200

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28386

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28441

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28636

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28676

Source: cve@mitre.org

Vendor Advisory

http://www.cups.org/str.php?L2589

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1437

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200712-14.xml

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2008:036

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/suse_security_summary_report.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/26910

Source: cve@mitre.org

http://www.securityfocus.com/bid/26917

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-563-1

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-352A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2007/4238

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/4242

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/39097

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39101

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00908.html

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=201570