cve/2009/CVE-2009-3553.md

18 lines
926 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2009-3553](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3553)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=%3D%20n%2Fa%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.
### POC
#### Reference
- http://www.cups.org/str.php?L3200
#### Github
No PoCs found on GitHub currently.