CVE-2007-4351

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-31 · updated 2026-06-16
Weakness: CWE-189

Description

Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a crafted (1) textWithLanguage or (2) nameWithLanguage Internet Printing Protocol (IPP) tag, leading to a stack-based buffer overflow.

Affected products

cups: through 1.3.3

References

http://docs.info.apple.com/article.html?artnum=307179
http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
http://secunia.com/advisories/27233
http://secunia.com/advisories/27410
http://secunia.com/advisories/27445
http://secunia.com/advisories/27447
http://secunia.com/advisories/27474
http://secunia.com/advisories/27494
http://secunia.com/advisories/27499
http://secunia.com/advisories/27540
http://secunia.com/advisories/27577
http://secunia.com/advisories/27604

Get alerted when CVE-2007-4351 or the next vulnerability affects your stack