CVE-2010-5325
Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2016-04-15
- Last modified
- 2024-08-07
- Weaknesses
- CWE-119
Affected products
- Foomatic-filters (Linuxfoundation)
- Linux (Oracle)
- Enterprise Linux (Redhat)
- Enterprise Linux Desktop (Redhat)
- Enterprise Linux Hpc Node (Redhat)
- Enterprise Linux Server (Redhat)
- Enterprise Linux Server Eus (Redhat)
- Enterprise Linux Workstation (Redhat)
References
- http://bzr.linuxfoundation.org/loggerhead/openprinting/foomatic-4.0/foomatic-filters/annotate/head:/ChangeLog
- http://rhn.redhat.com/errata/RHSA-2016-0491.html
- http://www.openwall.com/lists/oss-security/2016/02/15/1
- http://www.openwall.com/lists/oss-security/2016/02/15/7
- http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
- https://bugs.linuxfoundation.org/show_bug.cgi?id=515
- https://bugzilla.redhat.com/show_bug.cgi?id=1218297
