Description
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
CVSS vector
AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4 Affected Packages2 packages
🔴Vulnerability Details
3GHSAGHSA-cwfp-wwxr-hhq6: The _WriteProlog function in texttops↗2022-05-02 OSVCVE-2010-0542: The _WriteProlog function in texttops↗2010-06-21 CVEListCVE-2010-0542: The _WriteProlog function in texttops↗2010-06-21 📋Vendor Advisories
3UbuntuCUPS vulnerabilities↗2010-06-21 Red HatCUPS: texttops unchecked memory allocation failure leading to NULL pointer dereference↗2010-06-17 DebianCVE-2010-0542: cups - The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem...↗2010 💬Community
3BugzillaCVE-2010-3879 CVE-2011-0541 CVE-2011-0542 CVE-2011-0543 fuse: unprivileged user can unmount arbitrary locations via symlink attack↗2010-11-08 BugzillaCVE-2010-0540 CVE-2010-0542 CVE-2010-1748 CVE-2010-2431 cups various flaws [fedora-all]↗2010-06-17 BugzillaCVE-2010-0542 CUPS: texttops unchecked memory allocation failure leading to NULL pointer dereference↗2010-04-30