CVE-2007-4351 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-4351
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4351

Description: Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/38190 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-539-1 SUSE http://www.novell.com/linux/security/advisories/2007_58_cups.html ST 1018879 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.501902 SAID Secunia Advisory: SA27494 Secunia Advisory: SA27447 Secunia Advisory: SA27474 Secunia Advisory: SA27445 Secunia Advisory: SA27233 Secunia Advisory: SA27410 Secunia Advisory: SA27499 Secunia Advisory: SA27540 Secunia Advisory: SA27577 Secunia Advisory: SA27604 Secunia Advisory: SA27712 Secunia Advisory: SA28136 Secunia Advisory: SA30847 REDHAT http://www.redhat.com/support/errata/RHSA-2007-1022.html http://www.redhat.com/support/errata/RHSA-2007-1020.html http://www.redhat.com/support/errata/RHSA-2007-1023.html MISC http://secunia.com/secunia_research/2007-76/advisory/ MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:204 GENTOO http://security.gentoo.org/glsa/glsa-200711-16.xml FEDORA DEBIAN http://www.debian.org/security/2007/dsa-1407 CONFIRM http://docs.info.apple.com/article.html?artnum=307179 http://support.avaya.com/elmodocs2/security/ASA-2007-476.htm http://www.cups.org/str.php?L2561 CISCO http://www.cisco.com/en/US/products/products_security_response09186a00809a1f11.html CERT-VN 446897 CERT http://www.us-cert.gov/cas/techalerts/TA07-352A.html BID 26268 APPLE http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html

Return to the previous page.