| Max CVSS | 6.8 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2010-0302 | 4.3 |
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denia
|
03-02-2024 - 02:22 | 05-03-2010 - 19:30 | |
| CVE-2010-1748 | 4.3 |
The cgi_initialize_string function in cgi-bin/var.c in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, does not properly handle parameter values containing a % (percent) char
|
19-09-2017 - 01:30 | 17-06-2010 - 16:30 | |
| CVE-2010-0542 | 6.8 |
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or he
|
19-09-2017 - 01:30 | 21-06-2010 - 16:30 | |
| CVE-2010-0540 | 6.0 |
Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for
|
19-09-2017 - 01:30 | 17-06-2010 - 16:30 | |
| CVE-2010-2432 | 5.0 |
The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_U
|
15-05-2013 - 03:10 | 22-06-2010 - 20:30 | |
| CVE-2010-2431 | 2.6 |
The cupsFileOpen function in CUPS before 1.4.4 allows local users, with lp group membership, to overwrite arbitrary files via a symlink attack on the (1) /var/cache/cups/remote.cache or (2) /var/cache/cups/job.cache file.
|
15-05-2013 - 03:10 | 22-06-2010 - 20:30 |