CVE-2007-4351
Fixed in a distro release EPSS 7%
Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.
Products: cups
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.3.4-1 |
| Debian 13 | cups | 1.3.4-1 |
| Debian 14 | cups | 1.3.4-1 |
| Debian 4.0 | cupsys | 1.2.7-4etch1 |
| Debian 5.0 | cupsys | 1.3.2-1+lenny1 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.46 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.46 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.46 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.46 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.20.2.el4_5.2 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.20.2.el4_5.2 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.20.2.el4_5.2 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.20.2.el4_5.2 |
| Red Hat Enterprise Linux 5 | cups | 1:1.2.4-11.14.el5_1.1 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.2.4-11.14.el5_1.1 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.2.4-11.14.el5_1.1 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.2.4-11.14.el5_1.1 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.2.4-11.14.el5_1.1 |
| openSUSE Tumbleweed | cups | 2.3.3op2-4.2 |