Remote Code Execution and Denial of Service in CUPS by Apple
CVE-2010-0542
Currently unrated
What is CVE-2010-0542?
The _WriteProlog function in the Text Filter subsystem of CUPS earlier than version 1.4.4 contains flaws due to inadequate checks on calloc return values. These flaws may expose the system to remote attackers capable of crafting malicious files, potentially leading to denial of service through NULL pointer dereference or heap memory corruption. In some cases, it may even enable execution of arbitrary code, posing significant security risks to affected systems.