6.8

CVE-2010-0542

The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Cups Version <= 1.4.3
Apple ≫ Cups Version 1.1
Apple ≫ Cups Version 1.1.1
Apple ≫ Cups Version 1.1.2
Apple ≫ Cups Version 1.1.3
Apple ≫ Cups Version 1.1.4
Apple ≫ Cups Version 1.1.5
Apple ≫ Cups Version 1.1.5-1
Apple ≫ Cups Version 1.1.5-2
Apple ≫ Cups Version 1.1.6
Apple ≫ Cups Version 1.1.6-1
Apple ≫ Cups Version 1.1.6-2
Apple ≫ Cups Version 1.1.6-3
Apple ≫ Cups Version 1.1.7
Apple ≫ Cups Version 1.1.8
Apple ≫ Cups Version 1.1.9
Apple ≫ Cups Version 1.1.9-1
Apple ≫ Cups Version 1.1.10
Apple ≫ Cups Version 1.1.10-1
Apple ≫ Cups Version 1.1.11
Apple ≫ Cups Version 1.1.12
Apple ≫ Cups Version 1.1.13
Apple ≫ Cups Version 1.1.14
Apple ≫ Cups Version 1.1.15
Apple ≫ Cups Version 1.1.16
Apple ≫ Cups Version 1.1.17
Apple ≫ Cups Version 1.1.18
Apple ≫ Cups Version 1.1.19
Apple ≫ Cups Version 1.1.19 Update rc1
Apple ≫ Cups Version 1.1.19 Update rc2
Apple ≫ Cups Version 1.1.19 Update rc3
Apple ≫ Cups Version 1.1.19 Update rc4
Apple ≫ Cups Version 1.1.19 Update rc5
Apple ≫ Cups Version 1.1.20
Apple ≫ Cups Version 1.1.20 Update rc1
Apple ≫ Cups Version 1.1.20 Update rc2
Apple ≫ Cups Version 1.1.20 Update rc3
Apple ≫ Cups Version 1.1.20 Update rc4
Apple ≫ Cups Version 1.1.20 Update rc5
Apple ≫ Cups Version 1.1.20 Update rc6
Apple ≫ Cups Version 1.1.21
Apple ≫ Cups Version 1.1.21 Update rc1
Apple ≫ Cups Version 1.1.21 Update rc2
Apple ≫ Cups Version 1.1.22
Apple ≫ Cups Version 1.1.22 Update rc1
Apple ≫ Cups Version 1.1.22 Update rc2
Apple ≫ Cups Version 1.1.23
Apple ≫ Cups Version 1.1.23 Update rc1
Apple ≫ Cups Version 1.2 Update b1
Apple ≫ Cups Version 1.2 Update b2
Apple ≫ Cups Version 1.2 Update rc1
Apple ≫ Cups Version 1.2 Update rc2
Apple ≫ Cups Version 1.2 Update rc3
Apple ≫ Cups Version 1.2.0
Apple ≫ Cups Version 1.2.1
Apple ≫ Cups Version 1.2.2
Apple ≫ Cups Version 1.2.3
Apple ≫ Cups Version 1.2.4
Apple ≫ Cups Version 1.2.5
Apple ≫ Cups Version 1.2.6
Apple ≫ Cups Version 1.2.7
Apple ≫ Cups Version 1.2.8
Apple ≫ Cups Version 1.2.9
Apple ≫ Cups Version 1.2.10
Apple ≫ Cups Version 1.2.11
Apple ≫ Cups Version 1.2.12
Apple ≫ Cups Version 1.3 Update b1
Apple ≫ Cups Version 1.3 Update rc1
Apple ≫ Cups Version 1.3 Update rc2
Apple ≫ Cups Version 1.3.0
Apple ≫ Cups Version 1.3.1
Apple ≫ Cups Version 1.3.2
Apple ≫ Cups Version 1.3.3
Apple ≫ Cups Version 1.3.4
Apple ≫ Cups Version 1.3.5
Apple ≫ Cups Version 1.3.6
Apple ≫ Cups Version 1.3.7
Apple ≫ Cups Version 1.3.8
Apple ≫ Cups Version 1.3.9
Apple ≫ Cups Version 1.3.10
Apple ≫ Cups Version 1.3.11
Apple ≫ Cups Version 1.4.0
Apple ≫ Cups Version 1.4.1
Apple ≫ Cups Version 1.4.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.13% 0.895
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/43521
http://www.debian.org/security/2011/dsa-2176
http://www.vupen.com/english/advisories/2011/0535
http://security.gentoo.org/glsa/glsa-201207-10.xml
http://cups.org/articles.php?L596
Patch
http://www.mandriva.com/security/advisories?name=MDVSA-2010:232
http://www.mandriva.com/security/advisories?name=MDVSA-2010:234
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html
http://cups.org/str.php?L3516
http://cups.org/strfiles/3516/str3516.patch
Patch
http://securitytracker.com/id?1024121
http://www.securityfocus.com/bid/40943
https://bugzilla.redhat.com/show_bug.cgi?id=587746
Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10365