CVE-2010-5325

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-15 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer overflow in the unhtmlify function in foomatic-rip in foomatic-filters before 4.0.6 allows remote attackers to cause a denial of service (memory corruption and crash) or possibly execute arbitrary code via a long job title.

Affected products

Linuxfoundation Foomatic-Filters: through 4.0.5
Oracle Corporation Oracle Linux: 6
Red Hat Enterprise Linux: 6.0
RedHat Enterprise Linux Desktop: 6.0
RedHat Enterprise Linux Hpc Node: 6.0
RedHat Enterprise Linux Server: 6.0
RedHat Enterprise Linux Server Eus: 6.7.z
RedHat Enterprise Linux Workstation: 6.0

References

http://bzr.linuxfoundation.org/loggerhead/openprinting/foomatic-4.0/foomatic-filters/annotate/head:/ChangeLog
http://rhn.redhat.com/errata/RHSA-2016-0491.html
http://www.openwall.com/lists/oss-security/2016/02/15/1
http://www.openwall.com/lists/oss-security/2016/02/15/7
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html
https://bugs.linuxfoundation.org/show_bug.cgi?id=515
https://bugzilla.redhat.com/show_bug.cgi?id=1218297
http://bzr.linuxfoundation.org/loggerhead/openprinting/foomatic-4.0/foomatic-filters/annotate/head:/ChangeLog
http://rhn.redhat.com/errata/RHSA-2016-0491.html
http://www.openwall.com/lists/oss-security/2016/02/15/1
http://www.openwall.com/lists/oss-security/2016/02/15/7
http://www.oracle.com/technetwork/topics/security/linuxbulletinapr2016-2952096.html

Get alerted when CVE-2010-5325 or the next vulnerability affects your stack