CVE-2010-2941: Use After Free
Emmanuel Bouillon reported a memory corruption flaw in CUPS daemon. A specially-crafted IPP request can cause daemon to crash or, possibly, execute arbitrary code.
Acknowledgements:
Red Hat would like to thank Emmanuel Bouillon of NATO C3 Agency for reporting this issue.
Other sources
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-2941?
CVE-2010-2941 has a CVSS base score of 7.5, indicating a high severity level due to its potential for remote code execution.
How do I fix CVE-2010-2941?
To mitigate CVE-2010-2941, upgrade to a patched version of CUPS that addresses the memory corruption flaw.
What versions of CUPS are affected by CVE-2010-2941?
CVE-2010-2941 affects multiple CUPS versions, including 1.1.20, 1.4-b1, 1.1.5-2, among others.
Can an attacker exploit CVE-2010-2941 remotely?
Yes, an attacker can exploit CVE-2010-2941 remotely by sending a specially-crafted IPP request to the CUPS daemon.
What are the potential impacts of CVE-2010-2941?
The impacts of CVE-2010-2941 include crashing the CUPS daemon and potentially allowing an attacker to execute arbitrary code.