CVE-2010-5325

Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 90%
VendorProductVersion
redhatenterprise_linux_desktop
6.0
redhatenterprise_linux_hpc_node
6.0
redhatenterprise_linux_server
6.0
redhatenterprise_linux_server_eus
6.7.z:z
redhatenterprise_linux_workstation
6.0
linuxfoundationfoomatic-filters
𝑥
≤ 4.0.5
redhatenterprise_linux
6.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
cups-filters
bullseye
1.28.7-1+deb11u2
fixed
bullseye (security)
1.28.7-1+deb11u3
fixed
bookworm
1.28.17-3
fixed
bookworm (security)
1.28.17-3+deb12u1
fixed
sid
1.28.17-5
fixed
trixie
1.28.17-5
fixed
foomatic-filters
bullseye
4.0.17-12
fixed
bookworm
4.0.17-16
fixed
sid
4.0.17-16
fixed
trixie
4.0.17-16
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
cups-filters
wily
not-affected
trusty
dne
precise
not-affected
foomatic-filters
wily
not-affected
trusty
dne
precise
not-affected