ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-11-05 10:00
Updated : 2017-08-16 18:32
NVD link : CVE-2010-2941
Mitre link : CVE-2010-2941
JSON object : View
CWE
CWE-399
Resource Management Errors
Products Affected
apple
- cups