CVE-2010-0542 Null dereference in n/a
Remote attackers can cause denial of service or execute arbitrary code via a crafted file due to unchecked calloc return values in CUPS.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2010-0542?
CVE-2010-0542 is a medium-severity vulnerability in Apple Cups, published on 21 Jun 2010. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
Weakness: CWE-264
Which versions are affected by CVE-2010-0542?
It affects 1 product.
Products include Apple Cups.
How do I fix CVE-2010-0542?
Upgrade to a fixed version.
Is CVE-2010-0542 being exploited?
There is no known exploitation of CVE-2010-0542 in the wild and no public exploit code.
Other vulnerabilities in Apple Cups
Sources
Also known as DEBIAN-CVE-2010-0542, GHSA-cwfp-wwxr-hhq6.