CVE-2007-5849: Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 throug...

Security readout for executives and security teams

This old CUPS flaw can let an attacker run code if they can send a malicious SNMP response to a vulnerable CUPS installation. The risk is highest for legacy print servers or desktops still running CUPS 1.2 through 1.3.4 with SNMP printer discovery or backend behavior in use. Exposure is most plausible on legacy Unix, Linux, or macOS systems running vulnerable CUPS versions and using SNMP-based printer discovery or communication. Modern systems are unlikely to be affected unless they retain old CUPS packages or embedded print appliances based on them. Treat this as a legacy exposure cleanup item with high impact if present. It should be prioritized where old print infrastructure remains reachable on internal networks, especially in regulated or operational environments where print servers often persist beyond normal patch cycles. Mitigation focus: Inventory systems running CUPS 1.2 through 1.3.4.; Apply vendor CUPS security updates for the operating system distribution.; Upgrade CUPS to a vendor-supported version outside the affected range..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.