CVE-2010-0542: Null Pointer Dereference
A NULL pointer dereference issue exists in the WriteProlog function of the texttops image filter. The return value from calloc is not checked. This may lead to a NULL pointer dereference. Since the offset from the pointer at which data is subsequently written is controlled by the user, this issue may lead to application termination or arbitrary code execution.
Other sources
The WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
— MITRE
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0542?
CVE-2010-0542 has a severity level that can potentially lead to denial of service due to a NULL pointer dereference.
How do I fix CVE-2010-0542?
To fix CVE-2010-0542, you should update to the latest version of Apple CUPS that addresses this vulnerability.
What software is affected by CVE-2010-0542?
CVE-2010-0542 affects several versions of Apple CUPS, including versions 1.1 through 1.4.2.
What are the potential impacts of CVE-2010-0542?
The potential impacts of CVE-2010-0542 include crashing the service and possibly allowing an attacker to exploit the flaw.
Is CVE-2010-0542 easy to exploit?
Yes, CVE-2010-0542 is considered to be relatively easy to exploit due to user-controlled input leading to a NULL pointer dereference.