Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Cups | — | Apply OS X security update 2007-009 | Dec 16, 2011 | Dec 19, 2007 |
| Debian | — | Upgrade cups | Jul 30, 2024 | Dec 19, 2007 |
| Gentoo Linux | — | Upgrade net-print/cups.Upgrade app-emulation/emul-linux-x86-baselibs. | Oct 30, 2017 | Dec 19, 2007 |
| Suse | — | Upgrade cups-develUpgrade suse-releaseUpgrade cups-libs-64bitUpgrade cups-libs-32bitUpgrade cups-libsUpgrade cupsUpgrade cups-client | Feb 17, 2015 | Dec 19, 2007 |
| Ubuntu | — | Upgrade cupsys | Nov 8, 2024 | Dec 19, 2007 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub