PT-2010-2300 · Apple+1 · Cups+1

Regenrecht · Published 2010-06-17 · Updated 2024-06-15 · CVE-2010-0542

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CUPS versions prior to 1.4.4

Description The issue is related to the WriteProlog function in texttops.c in the Text Filter subsystem, which does not check the return values of certain calloc calls. This allows remote attackers to cause a denial of service, such as a NULL pointer dereference or heap memory corruption, or possibly execute arbitrary code via a crafted file.

Recommendations For versions prior to 1.4.4, update to version 1.4.4 or later to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-0542

DSA-2176-1

OPENSUSE-SU-2024:10075-1

RHSA-2010:0490

RHSA-2010_0490

Affected Products

Cups

Red Hat

References · 41

• http://mandriva.com/security/advisories?name=MDVSA-2010:232 · Vendor Advisory
• http://cups.org/articles.php?L596 · Patch
• http://cups.org/strfiles/3516/str3516.patch · Patch
• https://bugzilla.redhat.com/show_bug.cgi?id=587746 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2010-0542 · Security Note
• http://debian.org/security/2011/dsa-2176 · Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:234 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2010-0542 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2010-0542 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10075-1 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-201207-10.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2010-0542 · Vendor Advisory
• https://suse.com/security/cve/CVE-2014-3537 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10365 · Note