CVE-2010-0542

Loading...

General

Score:6.8/10.0
Severity:Medium
Category:Access Control Error

Impact Metrics

Confidentiality:Partial
Integrity:Partial
Availability:Partial

Exploitability Metrics

Access Vector:Network
Access Complexity:Medium
Authentication:None

Relative vulnerabilities

CVE-2008-5183, CVE-2009-3553, CVE-2010-0540, CVE-2010-1748, CVE-2010-2431, CVE-2010-2432, CVE-2010-2941

Published on 21/06/10 - Updated on 19/09/17

Description

The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.

Category: Access Control Error

CWE-264 (Permissions, Privileges, and Access Control)
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Security Notices

US National Vulnerability DatabaseCVE-2010-0542
Agence Nationale de la Sécurité des Systèmes d'Information CERTA-2010-AVI-275
CentOS CESA-2010:0490
Debian DSA-2176-1
Oracle Linux ELSA-2010-0490
Redhat RHSA-2010:0490
Renater 2011/VULN168

Exploits

No exploits available for this CVE in our database.

Relative technologies

VendorProduct
applecups

Share this vulnerability with:

Twitter Facebook LinkedIn Mail