CVE-2007-5849: Buffer Overflow
Published Dec 19, 2007
·Updated
Integer underflow in the asn1getstring function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.
Affected Software
6 affected components
Apple iOS and macOS=10.5.1
Easy Software Products Cups=1.2.4
Easy Software Products Cups=1.2.9
Easy Software Products Cups=1.2.10
Easy Software Products Cups=1.2.12
Easy Software Products Cups=1.3.3
Event History
Dec 19, 2007
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
09:46 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2007-5849?
CVE-2007-5849 is considered a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2007-5849?
To fix CVE-2007-5849, you should upgrade to a non-vulnerable version of CUPS.
3
Which versions of CUPS are affected by CVE-2007-5849?
CVE-2007-5849 affects CUPS versions 1.2.4 through 1.3.4.
4
Can CVE-2007-5849 be exploited remotely?
Yes, CVE-2007-5849 can be exploited remotely via crafted SNMP responses.
5
What types of attacks can be executed via CVE-2007-5849?
CVE-2007-5849 can lead to stack-based buffer overflows that may allow arbitrary code execution.