CVE-2007-4351
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.4%
exploitation probability
7.4%top 6% of all CVEs
observed exploitation
nono source reports it
Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.
Affected products
n/a · n/aReferences
http://docs.info.apple.com/article.html?artnum=307179http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=361661http://secunia.com/advisories/27233http://secunia.com/advisories/27410http://secunia.com/advisories/27445http://secunia.com/advisories/27447http://secunia.com/advisories/27474http://secunia.com/advisories/27494http://secunia.com/advisories/27499http://secunia.com/advisories/27540http://secunia.com/advisories/27577