HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2007-4351

CVSS 10.0v2.0pub. 2007-10-31upd. 2026-04-23

Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.

CVSS Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Cups

    APP
    Cups
    ≤ 1.3.3
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoSMemory
CWE
References

Related vulnerabilities

CVE-2018-6553HIGH8.8ten sam produkt

The CUPS AppArmor profile incorrectly confined the dnssd backend due to use of hard links. A local attacker co...

CVE-2014-8166HIGH8.8ten sam produkt

The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, wh...

CVE-2015-1158HIGH10.0ten sam produkt

The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for m...

CVE-2008-0047HIGH9.3ten sam produkt

Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the ve...

CVE-2008-0882HIGH10.0ten sam produkt

Double free vulnerability in the process_browse_data function in CUPS 1.3.5 allows remote attackers to cause a...