Vulnerability in Apple Mac OS X
CVE-2007-5849
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 9.3 (High). Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.136 (96.5th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 96.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.136 · newest: 0.136 · change: 0.000
Affected products
- Apple Mac OS X — versions 10.5.1
- Easy Software Products Cups — versions 1.2.4, 1.2.9, 1.2.10
Weakness classification (CWE)
References
- www.cups.org/str.php
- exchange.xforce.ibmcloud.com/vulnerabilities/39101 (vdb-entry)
- www.vupen.com/english/advisories/2007/4238 (vdb-entry, Vendor Advisory)
- www.us-cert.gov/cas/techalerts/TA07-352A.html (US Government Resource, third-party-advisory)
- secunia.com/advisories/28129 (Vendor Advisory, third-party-advisory)
- www.novell.com/linux/security/advisories/suse_security_summary_report.html (vendor-advisory)
- secunia.com/advisories/28441 (Vendor Advisory, third-party-advisory)
- secunia.com/advisories/28136 (Vendor Advisory, third-party-advisory)
- secunia.com/advisories/28113 (Vendor Advisory, third-party-advisory)
- secunia.com/advisories/28200 (Vendor Advisory, third-party-advisory)