Command Execution Vulnerability in HP Linux Imaging and Printing
CVE-2007-5208
Currently unrated
Key Information:
- Vendor
HP
- Vendor
- CVE Published:
- 13 October 2007
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 73%
What is CVE-2007-5208?
The Hewlett-Packard Linux Imaging and Printing Project (hplip) versions 1.x and 2.x prior to 2.7.10 are susceptible to a command execution vulnerability due to improper handling of shell metacharacters in the 'from' address when invoking the sendmail command. This flaw allows context-dependent attackers to execute arbitrary commands on the affected system, potentially compromising system integrity and security.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
