NetSight
IP …
high7.5

CVE-2009-3553

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd i…

Impact

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

Affected products

VendorProductAffected versions
AppleCups
Versions 1.3.7, 1.3.10
AppleMac Os X
before 10.5.8
from 10.6.0 before 10.6.2
AppleMac Os X Server
before 10.5.8
from 10.6.0 before 10.6.2
FedoraprojectFedora
Version 10
CanonicalUbuntu Linux
Versions 6.06, 8.04, 8.10, 9.04, 9.10
DebianDebian Linux
Version 5.0
RedhatEnterprise Linux
Version 5.0

Weakness classification

CWE-416

References