CVE-2010-4267
Published · Updated
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 11%
exploitation probability
11%top 4% of all CVEs
observed exploitation
nono source reports it
Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.
Affected products
n/a · n/aReferences
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053472.htmlhttp://lists.fedoraproject.org/pipermail/package-announce/2011-January/053474.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.htmlhttp://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.htmlhttp://osvdb.org/70498https://bugzilla.redhat.com/attachment.cgi?id=468455&action=diffhttps://bugzilla.redhat.com/show_bug.cgi?id=662740http://secunia.com/advisories/42939http://secunia.com/advisories/42956http://secunia.com/advisories/43022http://secunia.com/advisories/43068http://secunia.com/advisories/43083