CVE-2007-5849

CRITICAL 9.3CVE-2007-5849 · Published 19/12/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
cups easy_software_products	`= 1.2.10= 1.2.12= 1.2.4= 1.2.9= 1.3.3`	No fix yet

Description

Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.

References

bugs.gentoo.org/show_bug.cgi
docs.info.apple.com/article.html
lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
lists.opensuse.org/opensuse-security-announce/2008-01/msg00003.html
secunia.com/advisories/28113 · Vendor Advisory
secunia.com/advisories/28129 · Vendor Advisory
secunia.com/advisories/28136 · Vendor Advisory
secunia.com/advisories/28200 · Vendor Advisory
secunia.com/advisories/28386 · Vendor Advisory
secunia.com/advisories/28441 · Vendor Advisory
secunia.com/advisories/28636 · Vendor Advisory
secunia.com/advisories/28676 · Vendor Advisory
cups.org/str.php
debian.org/security/2007/dsa-1437
gentoo.org/security/en/glsa/glsa-200712-14.xml
mandriva.com/security/advisories
novell.com/linux/security/advisories/suse_security_summary_report.html
securityfocus.com/bid/26910
securityfocus.com/bid/26917
ubuntu.com/usn/usn-563-1
us-cert.gov/cas/techalerts/TA07-352A.html · US Government Resource
vupen.com/english/advisories/2007/4238 · Vendor Advisory
vupen.com/english/advisories/2007/4242 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/39097
exchange.xforce.ibmcloud.com/vulnerabilities/39101
redhat.com/archives/fedora-package-announce/2008-January/msg00908.html

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free