CVE-2007-5849
Fixed in a distro release EPSS 14%
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.
Products: easy_software_products cups
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.3.5-1 |
| Debian 13 | cups | 1.3.5-1 |
| Debian 14 | cups | 1.3.5-1 |
| Debian 4.0 | cupsys | 1.2.7-4etch2 |