High severity7.5NVD Advisory· Published Nov 20, 2009· Updated Apr 23, 2026
CVE-2009-3553
CVE-2009-3553
Description
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.
Affected products
12cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*
- cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
22- www.cups.org/newsgroups.php/newsgroups.phpnvdBroken LinkPatchVendor Advisory
- www.cups.org/newsgroups.php/newsgroups.phpnvdBroken LinkPatchVendor Advisory
- www.cups.org/newsgroups.php/newsgroups.phpnvdBroken LinkPatchVendor Advisory
- www.cups.org/str.phpnvdBroken LinkPatchVendor Advisory
- secunia.com/advisories/37360nvdBroken LinkVendor Advisory
- secunia.com/advisories/37364nvdBroken LinkVendor Advisory
- security.gentoo.org/glsa/glsa-201207-10.xmlnvdThird Party Advisory
- support.apple.com/kb/HT4004nvdVendor Advisory
- www.securityfocus.com/bid/37048nvdBroken LinkThird Party AdvisoryVDB Entry
- www.ubuntu.com/usn/USN-906-1nvdThird Party Advisory
- lists.apple.com/archives/security-announce/2010/Jan/msg00000.htmlnvdMailing List
- secunia.com/advisories/38241nvdBroken Link
- secunia.com/advisories/43521nvdBroken Link
- sunsolve.sun.com/search/document.donvdBroken Link
- www.debian.org/security/2011/dsa-2176nvdMailing List
- www.mandriva.com/security/advisoriesnvdBroken Link
- www.redhat.com/support/errata/RHSA-2009-1595.htmlnvdBroken Link
- www.vupen.com/english/advisories/2010/0173nvdBroken Link
- www.vupen.com/english/advisories/2011/0535nvdBroken Link
- bugzilla.redhat.com/show_bug.cginvdIssue Tracking
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11183nvdBroken Link
- www.redhat.com/archives/fedora-package-announce/2009-December/msg00332.htmlnvdMailing List
News mentions
0No linked articles in our index yet.