NetSight
IP …
high7.5Public exploit code

CVE-2009-0949

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The ippReadIO function in cups/ipp.c in cupsd in CUPS before 1.3.10 does not properly initialize memory for IPP request packets, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a scheduler request with two consecutive IPP_TAG_UNSUPPORTED tags.

Affected products

VendorProductAffected versions
AppleCups
before 1.3.10
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04
DebianDebian Linux
Versions 4.0, 5.0, 6.0
AppleMac Os X
from 10.0.0 before 10.4.11
from 10.5.0 before 10.5.8
AppleMac Os X Server
from 10.0.0 before 10.4.11
from 10.5.0 before 10.5.8
OpensuseOpensuse
Version 10.3
SuseLinux Enterprise
Versions 9.0, 10.0

Weakness classification

CWE-908

References