Vulnerability Report

CVE-2010-0542

Title: Apple Cups RCE

Memory Corruption

Proof Of Concept

No public PoC currently indexed for CVE-2010-0542.

CWE Category CWE-264

Published Date Jun 21, 2010

Modified Date Jun 16, 2026

Exploit Status Not Found

Score 6.8 CVSS v2.0

Exploit Probability (EPSS)

4.13%

Vulnerability Summary

CVE-2010-0542: The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.

Impacted Vendors

apple 1

easy_software_products 1

Reference Links

http://cups.org/articles.php?L596 http://cups.org/str.php?L3516 http://cups.org/strfiles/3516/str3516.patch http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html http://secunia.com/advisories/43521 http://security.gentoo.org/glsa/glsa-201207-10.xml http://securitytracker.com/id?1024121 http://www.debian.org/security/2011/dsa-2176 http://www.mandriva.com/security/advisories?name=MDVSA-2010:232 http://www.mandriva.com/security/advisories?name=MDVSA-2010:234 http://www.securityfocus.com/bid/40943 http://www.vupen.com/english/advisories/2011/0535 https://bugzilla.redhat.com/show_bug.cgi?id=587746 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10365 http://cups.org/articles.php?L596 http://cups.org/str.php?L3516 http://cups.org/strfiles/3516/str3516.patch http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html http://secunia.com/advisories/43521 http://security.gentoo.org/glsa/glsa-201207-10.xml http://securitytracker.com/id?1024121 http://www.debian.org/security/2011/dsa-2176 http://www.mandriva.com/security/advisories?name=MDVSA-2010:232 http://www.mandriva.com/security/advisories?name=MDVSA-2010:234 http://www.securityfocus.com/bid/40943 http://www.vupen.com/english/advisories/2011/0535 https://bugzilla.redhat.com/show_bug.cgi?id=587746 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10365

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

6.8

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:M/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2010-0542 Exploits & PoCs (Proof Of Concept)

No public PoCs found in our database for this CVE.

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 29, 2026 MODIFIED

Vulnerability data updated via NVD.

April 11, 2025 MODIFIED

Vulnerability data or affected products updated.

June 21, 2010 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.