CVE-2007-5849
HIGH 9.3EPSS 13.6%
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.
- CVSS v2.0 NVD
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 13.61% chance of exploitation in the next 30 days, 96th percentile
- Published
- 2007-12-19
- Updated
- 2024-08-07
ExploitDB entries (1)
Security advisories
- http://secunia.com/advisories/28113
- http://secunia.com/advisories/28129
- http://secunia.com/advisories/28136
- http://secunia.com/advisories/28200
- http://secunia.com/advisories/28386
- http://secunia.com/advisories/28441
- http://secunia.com/advisories/28636
- http://secunia.com/advisories/28676
- http://www.vupen.com/english/advisories/2007/4238
- http://www.vupen.com/english/advisories/2007/4242
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:036
- http://www.securityfocus.com/bid/26910
- http://www.securityfocus.com/bid/26917
- http://www.ubuntu.com/usn/usn-563-1