NVD

Id
14372  
Name
CVE-2010-2941  
Description
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.  
Reject
 
CVSS Version
2  
CVSS Score
7.9  
Severity
High  
CVSS Base Score
7.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-11-05  
Modified Date
2013-05-14  
Seq
2010-2941  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
79476 14372 CVE-2010-2941 http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox  View
79477 14372 CVE-2010-2941 APPLE-SA-2010-11-10-1  View
79478 14372 CVE-2010-2941 FEDORA-2010-17641  View
79479 14372 CVE-2010-2941 FEDORA-2010-17627  View
79480 14372 CVE-2010-2941 FEDORA-2010-17615  View
79481 14372 CVE-2010-2941 SUSE-SR:2010:023  View
79482 14372 CVE-2010-2941 RHSA-2010:0811  View
79483 14372 CVE-2010-2941 GLSA-201207-10  View
79484 14372 CVE-2010-2941 1024662  View
79485 14372 CVE-2010-2941 SSA:2010-333-01  View
79486 14372 CVE-2010-2941 http://support.apple.com/kb/HT4435  View
79487 14372 CVE-2010-2941 DSA-2176  View
79488 14372 CVE-2010-2941 MDVSA-2010:232  View
79489 14372 CVE-2010-2941 MDVSA-2010:233  View
79490 14372 CVE-2010-2941 MDVSA-2010:234  View
79491 14372 CVE-2010-2941 RHSA-2010:0866  View
79492 14372 CVE-2010-2941 44530  View
79493 14372 CVE-2010-2941 USN-1012-1  View
79494 14372 CVE-2010-2941 ADV-2010-2856  View
79495 14372 CVE-2010-2941 ADV-2010-3042  View
79496 14372 CVE-2010-2941 ADV-2010-3088  View
79497 14372 CVE-2010-2941 ADV-2011-0061  View
79498 14372 CVE-2010-2941 ADV-2011-0535  View
79499 14372 CVE-2010-2941 cups-cupsd-code-execution(62882)  View
79500 14372 CVE-2010-2941 https://bugzilla.redhat.com/show_bug.cgi?id=624438  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
36538 JVNDB-2010-002318 CUPS の cupsd 内にある ipp.c における任意のコードを実行される脆弱性 CUPS の cupsd 内にある ipp.c は、不正な文字列のデータタイプが付与された属性値のメモリを適切に割り当てないため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-2941 45521 CVE-2010-2941 14372 7.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002318.html 2010-11-11 2011-03-31 View