CVE-2012-4510

Published: Nov 20, 2012Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

cups-pk-helper before 0.2.3 does not properly wrap the (1) cupsGetFile and (2) cupsPutFile function calls, which allows user-assisted remote attackers to read or overwrite sensitive files using CUPS resources.

Affected (11)

Products: Cups Pk Helper Project: Cups Pk Helper

Cups Pk Helper Project

1 product

Cups Pk Helper

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Cups Pk Helper Project Cups Pk Helper	version ≤ 0.2.2
Cups Pk Helper Project Cups Pk Helper	Version 0.0.1
Cups Pk Helper Project Cups Pk Helper	Version 0.0.2
Cups Pk Helper Project Cups Pk Helper	Version 0.0.3
Cups Pk Helper Project Cups Pk Helper	Version 0.0.4
Cups Pk Helper Project Cups Pk Helper	Version 0.1.0
Cups Pk Helper Project Cups Pk Helper	Version 0.1.1
Cups Pk Helper Project Cups Pk Helper	Version 0.1.2
Cups Pk Helper Project Cups Pk Helper	Version 0.1.3
Cups Pk Helper Project Cups Pk Helper	Version 0.2.0
Cups Pk Helper Project Cups Pk Helper	Version 0.2.1

Related CWEs

CWE-264

References (6)

http://www.debian.org/security/2012/dsa-2562

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:069

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2012/10/12/2

Source: secalert@redhat.com

http://www.debian.org/security/2012/dsa-2562

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:069

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2012/10/12/2

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.