VDB
DEBIAN-CVE-2010-2941
DEBIAN-CVE-2010-2941
PUBLISHED
CVSS 9.800000190734863 CRITICAL
ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.
Risk Scores
CVSS v3.1
9.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | cups | 0, 0, 0 |
| Debian:12 | cups | 0, 0, 0 |
| Debian:14 | cups | 0, 0, 0 |
| Debian:11 | cups | 0, 0, 0 |
Timeline
- Nov 5, 2010 CVE Published
- Apr 28, 2026 CVE Updated