CVE-2010-4267

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-01-20 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in the hpmud_get_pml function in io/hpmud/pml.c in Hewlett-Packard Linux Imaging and Printing (HPLIP) 1.6.7, 3.9.8, 3.10.9, and probably other versions allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted SNMP response with a large length value.

Affected products

HP Linux Imaging And Printing Project: 1.6.7, 3.9.8, 3.10.9

References

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053472.html
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053474.html
http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html
http://osvdb.org/70498
http://secunia.com/advisories/42939
http://secunia.com/advisories/42956
http://secunia.com/advisories/43022
http://secunia.com/advisories/43068
http://secunia.com/advisories/43083
http://secunia.com/advisories/43102
http://secunia.com/advisories/48441

Get alerted when CVE-2010-4267 or the next vulnerability affects your stack