CVE-2010-0542
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1...
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
Exploit likelihood
What each source reports
NVD Score used
6.8
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
- Record
CVE-2010-0542- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
- Record
CVE-2010-0542- Updated
- 2026-11-02
EUVDEUVD-2010-0573 No score
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
- Record
EUVD-2010-0573- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cwfp-wwxr-hhq6 No score
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1...
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
- Record
GHSA-cwfp-wwxr-hhq6- Updated
- 2026-11-02
OSV No score
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
- Record
CVE-2010-0542- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0542 No score
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
- Record
DEBIAN-CVE-2010-0542- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10075-1 No score
cups-2.1.3-2.3 on GA media
These are all security issues fixed in the cups-2.1.3-2.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10075-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsDebian:12 |
before 1.4.4-1 | 1.4.4-1 |
cupsDebian:13 |
before 1.4.4-1 | 1.4.4-1 |
cupsDebian:14 |
before 1.4.4-1 | 1.4.4-1 |
cupsDebian:5.0 From an advisory covering 8 CVEs |
before 1.3.8-1+lenny9, plus listed versions 1.3.8-1+lenny61.3.8-1+lenny71.3.8-1+lenny81.3.8-1lenny4.11.3.8-1lenny5 |
1.3.8-1+lenny9 |
cupsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-develRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-libsRed Hat:enterprise_linux:3::as From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cupsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
Show 40 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cups-develRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cupsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-develRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-libsRed Hat:enterprise_linux:3::es From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cupsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-develRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cups-libsRed Hat:enterprise_linux:3::ws From an advisory covering 3 CVEs |
before 1:1.1.17-13.3.65 | 1:1.1.17-13.3.65 |
cupsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-libsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cupsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cupsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-libsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cupsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cups-libsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs |
before 1:1.1.22-0.rc1.9.32.el4_8.6 | 1:1.1.22-0.rc1.9.32.el4_8.6 |
cupsRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cups-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cups-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cupsRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cups-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cups-develRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cups-libsRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cups-lpdRed Hat:enterprise_linux:5::client From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cupsRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cups-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cups-develRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cups-libsRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cups-lpdRed Hat:enterprise_linux:5::server From an advisory covering 3 CVEs |
before 1:1.3.7-18.el5_5.4 | 1:1.3.7-18.el5_5.4 |
cupsopenSUSE:Tumbleweed From an advisory covering 17 CVEs |
before 2.1.3-2.3 | 2.1.3-2.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0542 is a medium vulnerability (CVSS 6.8) in Apple Cups, published June 21, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.13%, the 90th percentile. Fixed in cups 1.4.4-1.
References
bugzilla.redhat.com/show_bug.cgi?id=587746
mandriva.com/security/advisories?name=MDVSA-2010:234
securityfocus.com/bid/40943
cups.org/articles.php?L596
mandriva.com/security/advisories?name=MDVSA-2010:232
lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html
Show 41 moreShow less
debian.org/security/2011/dsa-2176
security.gentoo.org/glsa/glsa-201207-10.xml
cups.org/strfiles/3516/str3516.patch
vupen.com/english/advisories/2011/0535
cups.org/str.php?L3516
secunia.com/advisories/43521
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10365
securitytracker.com/id?1024121
nvd.nist.gov/vuln/detail/CVE-2010-0542
github.com/advisories/GHSA-cwfp-wwxr-hhq6
security-tracker.debian.org/tracker/CVE-2010-0542
access.redhat.com/errata/RHSA-2010:0490
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=588805
bugzilla.redhat.com/show_bug.cgi?id=591983
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0490.json
access.redhat.com/security/cve/CVE-2010-0540
cve.org/CVERecord?id=CVE-2010-0540
nvd.nist.gov/vuln/detail/CVE-2010-0540
access.redhat.com/security/cve/CVE-2010-0542
cve.org/CVERecord?id=CVE-2010-0542
access.redhat.com/security/cve/CVE-2010-1748
cve.org/CVERecord?id=CVE-2010-1748
nvd.nist.gov/vuln/detail/CVE-2010-1748
suse.com/security/cve/CVE-2009-0163
suse.com/security/cve/CVE-2009-2820
suse.com/security/cve/CVE-2009-3553
suse.com/security/cve/CVE-2010-0393
suse.com/security/cve/CVE-2010-0540
suse.com/security/cve/CVE-2010-0542
suse.com/security/cve/CVE-2010-1748
suse.com/security/cve/CVE-2010-2941
suse.com/security/cve/CVE-2012-5519
suse.com/security/cve/CVE-2012-6094
suse.com/security/cve/CVE-2014-2856
suse.com/security/cve/CVE-2014-3537
suse.com/security/cve/CVE-2014-5029
suse.com/security/cve/CVE-2014-5030
suse.com/security/cve/CVE-2014-5031
suse.com/security/cve/CVE-2015-1158
suse.com/security/cve/CVE-2015-1159