NetSight
IP …
critical9.8

CVE-2010-2941

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers t…

Impact

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.

Affected products

VendorProductAffected versions
AppleCups
through 1.4.4
AppleMac Os X
before 10.5.8
from 10.6.0 through 10.6.4
AppleMac Os X Server
before 10.5.8
from 10.6.0 through 10.6.4
FedoraprojectFedora
Versions 12, 13, 14
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.10, 10.04, 10.10
DebianDebian Linux
Version 5.0
OpensuseOpensuse
Versions 11.1, 11.2, 11.3
SuseLinux Enterprise
Versions 10.0, 11.0
SuseLinux Enterprise Server
Version 9
RedhatEnterprise Linux
Versions 5.0, 6.0
RedhatEnterprise Linux Desktop
Version 5.0
RedhatEnterprise Linux Server
Version 5.0

Weakness classification

CWE-416

References