Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.8

CUPS can crash or be hijacked by crafted file

CVE-2010-0542 · published 16 years ago
Summary

The CUPS printing system versions before 1.4.4 have a flaw in the way they handle certain data files. A specially made file can cause the service to stop working or potentially let an attacker take control. Upgrade CUPS to the latest version or apply the vendor's fix as soon as possible.

What to do
  • Update debian cups to version 1.4.4-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:12 debian cups < 1.4.4-1
Fix: upgrade to 1.4.4-1
Debian:13 debian cups < 1.4.4-1
Fix: upgrade to 1.4.4-1
Debian:14 debian cups < 1.4.4-1
Fix: upgrade to 1.4.4-1
– apple cups <= 1.4.3
1.1
1.1.1
1.1.2
1.1.3
1.1.4
1.1.5
1.1.5-1
1.1.5-2
1.1.6
1.1.6-1
1.1.6-2
50 more version ranges
cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*
Original advisory text
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to caus...
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
References
Severity
6.8 Medium
Exploitation
4% chance of attack within 30 days
Type
CWE-264Permissions, Privileges, and Access Controls
Timeline
Published21 Jun 2010
Updated23 Oct 2026
First seen4 Sep 2026
Sources
DEBIAN-CVE-2010-0542 · OSV
CVE-2010-0542 · NVD
Track software like this
Free during beta