Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2010-0542

Опубликовано: 21 июн. 2010
Источник: ubuntu
Приоритет: medium
CVSS2: 6.8

Описание

The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.

РелизСтатусПримечание
dapper

DNE

devel

not-affected

1.4.4-1
hardy

DNE

jaunty

released

1.3.9-17ubuntu3.9
karmic

released

1.4.1-5ubuntu2.6
lucid

released

1.4.3-1ubuntu1.2
upstream

released

1.4.4

Показывать по

РелизСтатусПримечание
dapper

released

1.2.2-0ubuntu0.6.06.19
devel

DNE

hardy

released

1.3.7-1ubuntu3.11
jaunty

DNE

karmic

DNE

lucid

DNE

upstream

released

1.4.4

Показывать по

6.8 Medium

CVSS2

Связанные уязвимости

redhat
около 15 лет назад

The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.

nvd
около 15 лет назад

The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.

debian
около 15 лет назад

The _WriteProlog function in texttops.c in texttops in the Text Filter ...

github
около 3 лет назад

The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.

oracle-oval
около 15 лет назад

ELSA-2010-0490: cups security update (IMPORTANT)

6.8 Medium

CVSS2