CVE-2010-2941

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.

CVSS v3 9.8 CRITICAL
CVSS v2.0 9.3 HIGH

9.8^/10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox	Broken Link
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html	Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050977.html	Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051277.html	Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051301.html	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html	Mailing List
http://rhn.redhat.com/errata/RHSA-2010-0811.html	Third Party Advisory
http://secunia.com/advisories/42287	Broken Link
http://secunia.com/advisories/42867	Broken Link
http://secunia.com/advisories/43521	Broken Link
http://security.gentoo.org/glsa/glsa-201207-10.xml	Third Party Advisory
http://securitytracker.com/id?1024662	Broken Link Third Party Advisory VDB Entry
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.468323	Broken Link
http://support.apple.com/kb/HT4435	Broken Link
http://www.debian.org/security/2011/dsa-2176	Mailing List Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:232	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2010:233	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2010:234	Broken Link
http://www.osvdb.org/68951	Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0866.html	Broken Link
http://www.securityfocus.com/bid/44530	Broken Link Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1012-1	Third Party Advisory
http://www.vupen.com/english/advisories/2010/2856	Broken Link Vendor Advisory
http://www.vupen.com/english/advisories/2010/3042	Broken Link
http://www.vupen.com/english/advisories/2010/3088	Broken Link
http://www.vupen.com/english/advisories/2011/0061	Broken Link
http://www.vupen.com/english/advisories/2011/0535	Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=624438	Issue Tracking Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/62882	Third Party Advisory VDB Entry
http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox	Broken Link
http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html	Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050977.html	Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051277.html	Mailing List
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051301.html	Mailing List
http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html	Mailing List
http://rhn.redhat.com/errata/RHSA-2010-0811.html	Third Party Advisory
http://secunia.com/advisories/42287	Broken Link
http://secunia.com/advisories/42867	Broken Link
http://secunia.com/advisories/43521	Broken Link
http://security.gentoo.org/glsa/glsa-201207-10.xml	Third Party Advisory
http://securitytracker.com/id?1024662	Broken Link Third Party Advisory VDB Entry
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.468323	Broken Link
http://support.apple.com/kb/HT4435	Broken Link
http://www.debian.org/security/2011/dsa-2176	Mailing List Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2010:232	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2010:233	Broken Link
http://www.mandriva.com/security/advisories?name=MDVSA-2010:234	Broken Link
http://www.osvdb.org/68951	Broken Link
http://www.redhat.com/support/errata/RHSA-2010-0866.html	Broken Link
http://www.securityfocus.com/bid/44530	Broken Link Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/USN-1012-1	Third Party Advisory
http://www.vupen.com/english/advisories/2010/2856	Broken Link Vendor Advisory
http://www.vupen.com/english/advisories/2010/3042	Broken Link
http://www.vupen.com/english/advisories/2010/3088	Broken Link
http://www.vupen.com/english/advisories/2011/0061	Broken Link
http://www.vupen.com/english/advisories/2011/0535	Broken Link
https://bugzilla.redhat.com/show_bug.cgi?id=624438	Issue Tracking Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/62882	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:apple:cups::::::::
	cpe:2.3:o:apple:mac_os_x::::::::
	cpe:2.3:o:apple:mac_os_x::::::::
	cpe:2.3:o:apple:mac_os_x_server::::::::
	cpe:2.3:o:apple:mac_os_x_server::::::::

Configuration 2 (hide)

OR	cpe:2.3:o:fedoraproject:fedora:12:::::::*
	cpe:2.3:o:fedoraproject:fedora:13:::::::*
	cpe:2.3:o:fedoraproject:fedora:14:::::::*

Configuration 3 (hide)

OR	cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:8.04:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::*
	cpe:2.3:o:canonical:ubuntu_linux:10.04::::-:::
	cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::*

Configuration 4 (hide)

cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

Configuration 5 (hide)

OR	cpe:2.3:o:opensuse:opensuse:11.1:::::::*
	cpe:2.3:o:opensuse:opensuse:11.2:::::::*
	cpe:2.3:o:opensuse:opensuse:11.3:::::::*
	cpe:2.3:o:suse:linux_enterprise:10.0:sp3::::::
	cpe:2.3:o:suse:linux_enterprise:11.0:-::::::
	cpe:2.3:o:suse:linux_enterprise:11.0:sp1::::::
	cpe:2.3:o:suse:linux_enterprise_server:9:::::::*

Configuration 6 (hide)

OR	cpe:2.3:o:redhat:enterprise_linux:5.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux:6.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::*
	cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::*

History

21 Nov 2024, 01:17

02 Feb 2024, 16:35

Information

Published : 2010-11-05 17:00

Updated : 2025-04-11 00:51

NVD link : CVE-2010-2941

Mitre link : CVE-2010-2941

CVE.ORG link : CVE-2010-2941

JSON object : View

Products Affected

debian

debian_linux

suse

linux_enterprise
linux_enterprise_server

redhat

enterprise_linux_workstation
enterprise_linux
enterprise_linux_server
enterprise_linux_desktop

fedoraproject

fedora

apple

mac_os_x_server
mac_os_x
cups

opensuse

opensuse

canonical

ubuntu_linux

CWE

CWE-416

Use After Free

{"id": "CVE-2010-2941", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2010-11-05T17:00:01.843", "references": [{"url": "http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "tags": ["Mailing List"], "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050977.html", "tags": ["Mailing List"], "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051277.html", "tags": ["Mailing List"], "source": "secalert@redhat.com"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051301.html", "tags": ["Mailing List"], "source": "secalert@redhat.com"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html", "tags": ["Mailing List"], "source": "secalert@redhat.com"}, {"url": "http://rhn.redhat.com/errata/RHSA-2010-0811.html", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/42287", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/42867", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://secunia.com/advisories/43521", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://security.gentoo.org/glsa/glsa-201207-10.xml", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://securitytracker.com/id?1024662", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.468323", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://support.apple.com/kb/HT4435", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://www.debian.org/security/2011/dsa-2176", "tags": ["Mailing List", "Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:232", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:233", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:234", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://www.osvdb.org/68951", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://www.redhat.com/support/errata/RHSA-2010-0866.html", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://www.securityfocus.com/bid/44530", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "http://www.ubuntu.com/usn/USN-1012-1", "tags": ["Third Party Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2010/2856", "tags": ["Broken Link", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2010/3042", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2010/3088", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2011/0061", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "http://www.vupen.com/english/advisories/2011/0535", "tags": ["Broken Link"], "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=624438", "tags": ["Issue Tracking", "Patch"], "source": "secalert@redhat.com"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62882", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "tags": ["Mailing List"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050977.html", "tags": ["Mailing List"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051277.html", "tags": ["Mailing List"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051301.html", "tags": ["Mailing List"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html", "tags": ["Mailing List"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://rhn.redhat.com/errata/RHSA-2010-0811.html", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/42287", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/42867", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/43521", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://security.gentoo.org/glsa/glsa-201207-10.xml", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1024662", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.468323", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://support.apple.com/kb/HT4435", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2011/dsa-2176", "tags": ["Mailing List", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:232", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:233", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2010:234", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/68951", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.redhat.com/support/errata/RHSA-2010-0866.html", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/44530", "tags": ["Broken Link", "Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ubuntu.com/usn/USN-1012-1", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2010/2856", "tags": ["Broken Link", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2010/3042", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2010/3088", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2011/0061", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2011/0535", "tags": ["Broken Link"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=624438", "tags": ["Issue Tracking", "Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/62882", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-416"}]}], "descriptions": [{"lang": "en", "value": "ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request."}, {"lang": "es", "value": "ipp.c en cupsd en CUPS v1.4.4 y anteriores no asigna correctamente memoria para valores de atributo con tipos de datos de cadena inv\u00e1lidos, permitiendo a atacantes remotos provocar una denegaci\u00f3n de servicio (uso despu\u00e9s de liberaci\u00f3n y ca\u00edda de la aplicaci\u00f3n) o posiblemente ejecutar c\u00f3digo arbitrario mediante una solicitud IPP manipulada."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54EE6E16-85C5-41AF-970A-FD6C5408B71E", "versionEndIncluding": "1.4.4"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "80C038E4-C24D-45E9-8287-C205C0C07809", "versionEndExcluding": "10.5.8"}, {"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6DA1D55-B689-47CF-A55F-3C16DA4EFFFF", "versionEndIncluding": "10.6.4", "versionStartIncluding": "10.6.0"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F89C200-D340-4BB4-BC82-C26629184C5C", "versionEndExcluding": "10.5.8"}, {"criteria": "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "924AFEE6-E331-4E10-B1B8-1FF1FF801120", "versionEndIncluding": "10.6.4", "versionStartIncluding": "10.6.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E44669D7-6C1E-4844-B78A-73E253A7CC17"}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2D59BD0-43DE-4E58-A057-640AB98359A6"}, {"criteria": "cpe:2.3:o:fedoraproject:fedora:14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BDE52846-24EC-4068-B788-EC7F915FFF11"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "454A5D17-B171-4F1F-9E0B-F18D1E5CA9FD"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C0507E91-567A-41D6-A7E5-5088A39F75FB"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2BCB73E-27BB-4878-AD9C-90C4F20C25A0"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*", "vulnerable": true, "matchCriteriaId": "01EDA41C-6B2E-49AF-B503-EB3882265C11"}, {"criteria": "cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87614B58-24AB-49FB-9C84-E8DDBA16353B"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8C757774-08E7-40AA-B532-6F705C8F7639"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBF7B6A8-3DF9-46EC-A90E-6EF68C39F883"}, {"criteria": "cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A01C8B7E-EB19-40EA-B1D2-9AE5EA536C95"}, {"criteria": "cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5646FDE9-CF21-46A9-B89D-F5BBDB4249AF"}, {"criteria": "cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1193A7E6-DCB4-4E79-A509-1D6948153A57"}, {"criteria": "cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1608E282-2E96-4447-848D-DBE915DB0EF9"}, {"criteria": "cpe:2.3:o:suse:linux_enterprise:11.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4500161F-13A0-4369-B93A-778B34E7F005"}, {"criteria": "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CD2D897-E321-4CED-92E0-11A98B52053C"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "133AAFA7-AF42-4D7B-8822-AA2E85611BF5"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "54D669D4-6D7E-449D-80C1-28FA44F06FFE"}, {"criteria": "cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0AC5CD5-6E58-433C-9EB3-6DFE5656463E"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}

Type	Values Removed	Values Added
CVSS	v2 : ~~7.9~~ v3 : ~~unknown~~	v2 : 9.3 v3 : 9.8
First Time		Suse linux Enterprise Canonical ubuntu Linux Redhat enterprise Linux Desktop Opensuse Suse linux Enterprise Server Opensuse opensuse Redhat enterprise Linux Server Fedoraproject Debian Redhat enterprise Linux Redhat enterprise Linux Workstation Canonical Fedoraproject fedora Apple mac Os X Server Apple mac Os X Redhat Suse Debian debian Linux
References	~~() http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox -~~	() http://blogs.sun.com/security/entry/multiple_vulnerabilities_in_mozilla_firefox - Broken Link
References	~~() http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html -~~	() http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html - Mailing List
References	~~() http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050977.html -~~	() http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050977.html - Mailing List
References	~~() http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051277.html -~~	() http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051277.html - Mailing List
References	~~() http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051301.html -~~	() http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051301.html - Mailing List
References	~~() http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html -~~	() http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html - Mailing List
References	~~() http://rhn.redhat.com/errata/RHSA-2010-0811.html -~~	() http://rhn.redhat.com/errata/RHSA-2010-0811.html - Third Party Advisory
References	~~() http://secunia.com/advisories/42287 -~~	() http://secunia.com/advisories/42287 - Broken Link
References	~~() http://secunia.com/advisories/42867 -~~	() http://secunia.com/advisories/42867 - Broken Link
References	~~() http://secunia.com/advisories/43521 -~~	() http://secunia.com/advisories/43521 - Broken Link
References	~~() http://security.gentoo.org/glsa/glsa-201207-10.xml -~~	() http://security.gentoo.org/glsa/glsa-201207-10.xml - Third Party Advisory
References	~~() http://securitytracker.com/id?1024662 -~~	() http://securitytracker.com/id?1024662 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.468323 -~~	() http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.468323 - Broken Link
References	~~() http://support.apple.com/kb/HT4435 -~~	() http://support.apple.com/kb/HT4435 - Broken Link
References	~~() http://www.debian.org/security/2011/dsa-2176 -~~	() http://www.debian.org/security/2011/dsa-2176 - Mailing List, Third Party Advisory
References	~~() http://www.mandriva.com/security/advisories?name=MDVSA-2010:232 -~~	() http://www.mandriva.com/security/advisories?name=MDVSA-2010:232 - Broken Link
References	~~() http://www.mandriva.com/security/advisories?name=MDVSA-2010:233 -~~	() http://www.mandriva.com/security/advisories?name=MDVSA-2010:233 - Broken Link
References	~~() http://www.mandriva.com/security/advisories?name=MDVSA-2010:234 -~~	() http://www.mandriva.com/security/advisories?name=MDVSA-2010:234 - Broken Link
References	~~() http://www.osvdb.org/68951 -~~	() http://www.osvdb.org/68951 - Broken Link
References	~~() http://www.redhat.com/support/errata/RHSA-2010-0866.html -~~	() http://www.redhat.com/support/errata/RHSA-2010-0866.html - Broken Link
References	~~() http://www.securityfocus.com/bid/44530 -~~	() http://www.securityfocus.com/bid/44530 - Broken Link, Third Party Advisory, VDB Entry
References	~~() http://www.ubuntu.com/usn/USN-1012-1 -~~	() http://www.ubuntu.com/usn/USN-1012-1 - Third Party Advisory
References	~~() http://www.vupen.com/english/advisories/2010/2856 - Vendor Advisory~~	() http://www.vupen.com/english/advisories/2010/2856 - Broken Link, Vendor Advisory
References	~~() http://www.vupen.com/english/advisories/2010/3042 -~~	() http://www.vupen.com/english/advisories/2010/3042 - Broken Link
References	~~() http://www.vupen.com/english/advisories/2010/3088 -~~	() http://www.vupen.com/english/advisories/2010/3088 - Broken Link
References	~~() http://www.vupen.com/english/advisories/2011/0061 -~~	() http://www.vupen.com/english/advisories/2011/0061 - Broken Link
References	~~() http://www.vupen.com/english/advisories/2011/0535 -~~	() http://www.vupen.com/english/advisories/2011/0535 - Broken Link
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=624438 - Patch~~	() https://bugzilla.redhat.com/show_bug.cgi?id=624438 - Issue Tracking, Patch
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/62882 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/62882 - Third Party Advisory, VDB Entry
CPE	cpe:2.3:a:apple:cups:1.2.3:::::::* cpe:2.3:a:apple:cups:1.1.20:rc4:::::: cpe:2.3:a:apple:cups:1.2.5:::::::* cpe:2.3:a:apple:cups:1.1.22:rc2:::::: cpe:2.3:a:apple:cups:1.1.5-1:::::::* cpe:2.3:a:apple:cups:1.2.6:::::::* cpe:2.3:a:apple:cups:1.1.6-2:::::::* cpe:2.3:a:apple:cups:1.1.20:::::::* cpe:2.3:a:apple:cups:1.1.14:::::::* cpe:2.3:a:apple:cups:1.1.19:rc1:::::: cpe:2.3:a:apple:cups:1.1.9-1:::::::* cpe:2.3:a:apple:cups:1.1.7:::::::* cpe:2.3:a:apple:cups:1.2.7:::::::* cpe:2.3:a:apple:cups:1.1.2:::::::* cpe:2.3:a:apple:cups:1.4:b2:::::: cpe:2.3:a:apple:cups:1.2.0:::::::* cpe:2.3:a:apple:cups:1.1.9:::::::* cpe:2.3:a:apple:cups:1.1.20:rc6:::::: cpe:2.3:a:apple:cups:1.2:b1:::::: cpe:2.3:a:apple:cups:1.1.1:::::::* cpe:2.3:a:apple:cups:1.2:rc1:::::: cpe:2.3:a:apple:cups:1.1.21:::::::* cpe:2.3:a:apple:cups:1.1.20:rc3:::::: cpe:2.3:a:apple:cups:1.2:b2:::::: cpe:2.3:a:apple:cups:1.3:rc1:::::: cpe:2.3:a:apple:cups:1.1.3:::::::* cpe:2.3:a:apple:cups:1.1.20:rc5:::::: cpe:2.3:a:apple:cups:1.1.22:rc1:::::: cpe:2.3:a:apple:cups:1.3.10:::::::* cpe:2.3:a:apple:cups:1.2.10:::::::* cpe:2.3:a:apple:cups:1.1.19:::::::* cpe:2.3:a:apple:cups:1.1.11:::::::* cpe:2.3:a:apple:cups:1.3.1:::::::* cpe:2.3:a:apple:cups:1.3.8:::::::* cpe:2.3:a:apple:cups:1.3.9:::::::* cpe:2.3:a:apple:cups:1.1.21:rc1:::::: cpe:2.3:a:apple:cups:1.2.2:::::::* cpe:2.3:a:apple:cups:1.1.19:rc4:::::: cpe:2.3:a:apple:cups:1.3.7:::::::* cpe:2.3:a:apple:cups:1.4:b1:::::: cpe:2.3:a:apple:cups:1.1.21:rc2:::::: cpe:2.3:a:apple:cups:1.3:b1:::::: cpe:2.3:a:apple:cups:1.1.19:rc2:::::: cpe:2.3:a:apple:cups:1.1.4:::::::* cpe:2.3:a:apple:cups:1.1.5-2:::::::* cpe:2.3:a:apple:cups:1.1.5:::::::* cpe:2.3:a:apple:cups:1.3.5:::::::* cpe:2.3:a:apple:cups:1.2.11:::::::* cpe:2.3:a:apple:cups:1.4:rc1:::::: cpe:2.3:a:apple:cups:1.3:rc2:::::: cpe:2.3:a:apple:cups:1.1.19:rc3:::::: cpe:2.3:a:apple:cups:1.3.2:::::::* cpe:2.3:a:apple:cups:1.1.6:::::::* cpe:2.3:a:apple:cups:1.4.3:::::::* cpe:2.3:a:apple:cups:1.1.12:::::::* cpe:2.3:a:apple:cups:1.1.23:::::::* cpe:2.3:a:apple:cups:1.1.16:::::::* cpe:2.3:a:apple:cups:1.1.13:::::::* cpe:2.3:a:apple:cups:1.2.8:::::::* cpe:2.3:a:apple:cups:1.4.0:::::::* cpe:2.3:a:apple:cups:1.1:::::::* cpe:2.3:a:apple:cups:1.4.1:::::::* cpe:2.3:a:apple:cups:1.4.2:::::::* cpe:2.3:a:apple:cups:1.1.20:rc1:::::: cpe:2.3:a:apple:cups:1.2.12:::::::* cpe:2.3:a:apple:cups:1.2:rc3:::::: cpe:2.3:a:apple:cups:1.1.15:::::::* cpe:2.3:a:apple:cups:1.1.19:rc5:::::: cpe:2.3:a:apple:cups:1.3.4:::::::* cpe:2.3:a:apple:cups:1.1.18:::::::* cpe:2.3:a:apple:cups:1.4:b3:::::: cpe:2.3:a:apple:cups:1.1.20:rc2:::::: cpe:2.3:a:apple:cups:1.1.10:::::::* cpe:2.3:a:apple:cups:1.3.6:::::::* cpe:2.3:a:apple:cups:1.2.9:::::::* cpe:2.3:a:apple:cups:1.3.3:::::::* cpe:2.3:a:apple:cups:1.3.0:::::::* cpe:2.3:a:apple:cups:1.1.8:::::::* cpe:2.3:a:apple:cups:1.1.6-3:::::::* cpe:2.3:a:apple:cups:1.3.11:::::::* cpe:2.3:a:apple:cups:1.1.6-1:::::::* cpe:2.3:a:apple:cups:1.2.4:::::::* cpe:2.3:a:apple:cups:1.2:rc2:::::: cpe:2.3:a:apple:cups:1.1.10-1:::::::* cpe:2.3:a:apple:cups:1.1.17:::::::* cpe:2.3:a:apple:cups:1.1.22:::::::* cpe:2.3:a:apple:cups:1.2.1:::::::* cpe:2.3:a:apple:cups:1.1.23:rc1::::::	cpe:2.3:o:canonical:ubuntu_linux:10.10:::::::* cpe:2.3:o:opensuse:opensuse:11.1:::::::* cpe:2.3:o:suse:linux_enterprise_server:9:::::::* cpe:2.3:o:suse:linux_enterprise:10.0:sp3:::::: cpe:2.3:o:fedoraproject:fedora:13:::::::* cpe:2.3:o:canonical:ubuntu_linux:10.04::::-::: cpe:2.3:o:apple:mac_os_x_server:::::::: cpe:2.3:o:debian:debian_linux:5.0:::::::* cpe:2.3:o:opensuse:opensuse:11.3:::::::* cpe:2.3:o:canonical:ubuntu_linux:6.06:::::::* cpe:2.3:o:suse:linux_enterprise:11.0:sp1:::::: cpe:2.3:o:apple:mac_os_x:::::::: cpe:2.3:o:opensuse:opensuse:11.2:::::::* cpe:2.3:o:redhat:enterprise_linux:5.0:::::::* cpe:2.3:o:canonical:ubuntu_linux:9.10:::::::* cpe:2.3:o:redhat:enterprise_linux:6.0:::::::* cpe:2.3:o:suse:linux_enterprise:11.0:-:::::: cpe:2.3:o:redhat:enterprise_linux_desktop:5.0:::::::* cpe:2.3:o:redhat:enterprise_linux_server:5.0:::::::* cpe:2.3:o:canonical:ubuntu_linux:8.04:::::::* cpe:2.3:o:fedoraproject:fedora:12:::::::* cpe:2.3:o:fedoraproject:fedora:14:::::::* cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:::::::*
CWE	~~CWE-399~~	CWE-416

9.8 /10