CVE-2010-0542

Currently unrated

Key Information:

Vendor
Apple
Status
Cups
Vendor
CVE Published:
21 June 2010

Summary

The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.

References

https://bugzilla.redhat.com/show_bug.cgi?id=587746
x_refsource_CONFIRM
http://www.mandriva.com/security/advisories?name=MDVSA-20...
vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/40943
vdb-entryx_refsource_BID

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.