NVD

Id
57900  
Name
CVE-2007-5849  
Description
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-12-19  
Modified Date
2011-10-11  
Seq
2007-5849  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
296328 57900 CVE-2007-5849 http://bugs.gentoo.org/show_bug.cgi?id=201570  View
296329 57900 CVE-2007-5849 http://docs.info.apple.com/article.html?artnum=307179  View
296330 57900 CVE-2007-5849 APPLE-SA-2007-12-17  View
296331 57900 CVE-2007-5849 SUSE-SA:2008:002  View
296332 57900 CVE-2007-5849 http://www.cups.org/str.php?L2589  View
296333 57900 CVE-2007-5849 DSA-1437  View
296334 57900 CVE-2007-5849 GLSA-200712-14  View
296335 57900 CVE-2007-5849 MDVSA-2008:036  View
296336 57900 CVE-2007-5849 SUSE-SR:2008:002  View
296337 57900 CVE-2007-5849 26910  View
296338 57900 CVE-2007-5849 26917  View
296339 57900 CVE-2007-5849 USN-563-1  View
296340 57900 CVE-2007-5849 TA07-352A  View
296341 57900 CVE-2007-5849 ADV-2007-4238  View
296342 57900 CVE-2007-5849 ADV-2007-4242  View
296343 57900 CVE-2007-5849 macos-snmp-bo(39097)  View
296344 57900 CVE-2007-5849 cups-asn1getstring-bo(39101)  View
296345 57900 CVE-2007-5849 FEDORA-2008-0322  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52354 JVNDB-2007-001044 CUPS の SNMP 用バックエンドプログラムにおける整数オーバーフローの脆弱性 CUPS には SNMP 用バックエンドプログラム (backend/snmp.c) の asn1_get_string() 関数において、SNMP レスポンスの取り扱いに不備があり、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-5849 29204 CVE-2007-5849 57900 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001044.html 2007-12-19 2008-01-07 View