CVE-2008-0755

Published: Feb 13, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the ReportSysLogEvent function in the LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI, Professional, and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; might allow remote attackers to execute arbitrary code via format string specifiers in the queue name in a request.

Affected (6)

Products: Cyan Soft: Cyanprintip Basic, Cyanprintip Easy Opi, Cyanprintip Professional, Cyanprintip Standard, Cyanprintip Workstation, Opium4 Opi Server

Cyan Soft

6 products

Cyanprintip Basic

Cyanprintip Easy Opi

Cyanprintip Professional

Cyanprintip Standard

Cyanprintip Workstation

Opium4 Opi Server

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cyan Soft Cyanprintip Basic	Up to 4.10.1030
Cyan Soft Cyanprintip Easy Opi	Up to 4.10.1030
Cyan Soft Cyanprintip Professional	Up to 4.10.1030
Cyan Soft Cyanprintip Standard	Up to 4.10.940
Cyan Soft Cyanprintip Workstation	Up to 4.10.836
Cyan Soft Opium4 Opi Server	Up to 4.10.1028