CVE-2010-2941

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-11-05 · updated 2026-06-16
Weakness: CWE-416

Description

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.

Affected products

cups: through 1.4.4
macOS: before 10.5.8; from 10.6.0 through 10.6.4 — fixed in 10.5.8
Apple Mac Os X Server: before 10.5.8; from 10.6.0 through 10.6.4 — fixed in 10.5.8
Canonical Ubuntu Linux: 6.06, 8.04, 9.10, 10.04, 10.10
Debian Linux: 5.0
Fedoraproject Fedora: 12, 13, 14
Opensuse: 11.1, 11.2, 11.3
Red Hat Enterprise Linux: 5.0, 6.0
RedHat Enterprise Linux Desktop: 5.0
RedHat Enterprise Linux Server: 5.0
RedHat Enterprise Linux Workstation: 5.0
SUSE Linux Enterprise: 10.0-sp3, 11.0, 11.0-sp1
SUSE Linux Enterprise Server: 9

How to fix

Upgrade to a fixed version: macOS 10.5.8; Apple Mac Os X Server 10.5.8. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2010-2941 or the next vulnerability affects your stack