CVE-2007-5849

CVE-2007-5849 is a critical-severity vulnerability in Easy Software Products Cups with a CVSS 2.0 base score of 9.3. Its EPSS exploit-prediction score of 14% places it in the 96th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-189.

Key facts

• Severity: Critical (CVSS 2.0 base score 9.3)
• EPSS exploit prediction: 14% (96th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-189
• Affected product: Easy Software Products Cups
• Published: 2007-12-19
• Last modified: 2026-06-16

Description

Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.

Frequently asked questions

What is CVE-2007-5849?

Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted SNMP response that triggers a stack-based buffer overflow.

How severe is CVE-2007-5849?

CVE-2007-5849 has a CVSS 2.0 base score of 9.3, rated critical severity.

Is CVE-2007-5849 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 14% (96th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-5849?

CVE-2007-5849 primarily affects Easy Software Products Cups. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-5849?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2007-5849 published?

CVE-2007-5849 was published on 2007-12-19 and last updated on 2026-06-16.

References

• http://bugs.gentoo.org/show_bug.cgi?id=201570
• http://docs.info.apple.com/article.html?artnum=307179
• http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html
• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00003.html
• http://secunia.com/advisories/28113
• http://secunia.com/advisories/28129
• http://secunia.com/advisories/28136
• http://secunia.com/advisories/28200
• http://secunia.com/advisories/28386
• http://secunia.com/advisories/28441
• http://secunia.com/advisories/28636
• http://secunia.com/advisories/28676
• http://www.cups.org/str.php?L2589
• http://www.debian.org/security/2007/dsa-1437
• http://www.gentoo.org/security/en/glsa/glsa-200712-14.xml
• http://www.mandriva.com/security/advisories?name=MDVSA-2008:036
• http://www.novell.com/linux/security/advisories/suse_security_summary_report.html
• http://www.securityfocus.com/bid/26910
• http://www.securityfocus.com/bid/26917
• http://www.ubuntu.com/usn/usn-563-1
• http://www.us-cert.gov/cas/techalerts/TA07-352A.html
• http://www.vupen.com/english/advisories/2007/4238
• http://www.vupen.com/english/advisories/2007/4242
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39097
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39101
• https://www.redhat.com/archives/fedora-package-announce/2008-January/msg00908.html

Affected products (5)

• cpe:2.3:a:easy_software_products:cups:1.2.4:*:*:*:*:*:*:*
• cpe:2.3:a:easy_software_products:cups:1.2.9:*:*:*:*:*:*:*
• cpe:2.3:a:easy_software_products:cups:1.2.10:*:*:*:*:*:*:*
• cpe:2.3:a:easy_software_products:cups:1.2.12:*:*:*:*:*:*:*
• cpe:2.3:a:easy_software_products:cups:1.3.3:*:*:*:*:*:*:*

More vulnerabilities in Easy Software Products Cups

• CVE-2005-3625 — Critical (CVSS 10.0): Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows…
• CVE-2004-0888 — Critical (CVSS 10.0): Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and…
• CVE-2004-0926 — Critical (CVSS 10.0): Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute…
• CVE-2004-0889 — Critical (CVSS 10.0): Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to…
• CVE-2002-1383 — Critical (CVSS 10.0): Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to…
• CVE-2002-1367 — Critical (CVSS 10.0): Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to add printers without authentication…

All CVEs affecting Easy Software Products Cups →

Other CWE-189 (Numeric Errors) vulnerabilities

• CVE-2015-8396 — Critical (CVSS 10.0): Integer overflow in the ImageRegionReader::ReadIntoBuffer function in…
• CVE-2015-7205 — Critical (CVSS 10.0): Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in Mozilla Firefox before 43.0 and Firefox ESR 38.x…
• CVE-2015-6575 — Critical (CVSS 10.0): SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which…
• CVE-2015-3864 — Critical (CVSS 10.0): Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in…
• CVE-2015-3836 — Critical (CVSS 10.0): The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1…
• CVE-2015-3834 — Critical (CVSS 10.0): Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android…

Browse all CWE-189 (Numeric Errors) vulnerabilities →