What’s Vulnerable › Vulnerabilities

CVE-2012-4510

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-11-20 · updated 2026-06-16
• Weakness: CWE-264

Description

cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources.

Affected products

• Cups-Pk-Helper Project Cups-Pk-Helper: through 0.2.2; 0.0.1, 0.0.2, 0.0.3, 0.0.4, 0.1.0, 0.1.1 (+4)

References

• http://www.debian.org/security/2012/dsa-2562
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:069
• http://www.openwall.com/lists/oss-security/2012/10/12/2
• http://www.debian.org/security/2012/dsa-2562
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:069
• http://www.openwall.com/lists/oss-security/2012/10/12/2

Get alerted when CVE-2012-4510 or the next vulnerability affects your stack