CVE-2010-0542

CUPS: texttops unchecked memory allocation failure leading to NULL pointer dereference

Published Jun 21, 2010 CVSS 2.0 · 6.8 Medium EPSS 4.1% KEV · Not listed
Description
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2176-1 cups security update
EUVD EUVD EUVD-2010-0573 The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
Ubuntu USN Ubuntu USN USN-952-1 CUPS vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
apple
Published
Updated
Aug 7, 2024, 12:52 AM
Reserved
Feb 3, 2010, 12:00 AM
Status
Modified
Published
Jun 21, 2010, 4:30 PM
Modified
Jun 16, 2026, 11:16 PM
Severity
Important
Public date
Jun 17, 2010, 12:00 AM