OR
     *cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*
     *cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:10:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*
     *cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*
     *cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*
     *cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* versions up to (excluding) 10.5.8
     *cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* versions from (including) 10.6.0 up to (excluding) 10.6.2
     *cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:* versions up to (excluding) 10.5.8
     *cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:* versions from (including) 10.6.0 up to (excluding) 10.6.2

NIST AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NIST CWE-416

NIST CWE-399

http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html No Types Assigned

http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html Mailing List

http://secunia.com/advisories/37360 Vendor Advisory

http://secunia.com/advisories/37360 Broken Link, Vendor Advisory

http://secunia.com/advisories/37364 Vendor Advisory

http://secunia.com/advisories/37364 Broken Link, Vendor Advisory

http://secunia.com/advisories/38241 No Types Assigned

http://secunia.com/advisories/38241 Broken Link

http://secunia.com/advisories/43521 No Types Assigned

http://secunia.com/advisories/43521 Broken Link

http://security.gentoo.org/glsa/glsa-201207-10.xml No Types Assigned

http://security.gentoo.org/glsa/glsa-201207-10.xml Third Party Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-66-275230-1 No Types Assigned

http://sunsolve.sun.com/search/document.do?assetkey=1-66-275230-1 Broken Link

http://support.apple.com/kb/HT4004 No Types Assigned

http://support.apple.com/kb/HT4004 Vendor Advisory

http://www.cups.org/newsgroups.php/newsgroups.php?v5994+gcups.bugs Patch, Vendor Advisory

http://www.cups.org/newsgroups.php/newsgroups.php?v5994+gcups.bugs Broken Link, Patch, Vendor Advisory

http://www.cups.org/newsgroups.php/newsgroups.php?v5996+gcups.bugs Patch, Vendor Advisory

http://www.cups.org/newsgroups.php/newsgroups.php?v5996+gcups.bugs Broken Link, Patch, Vendor Advisory

http://www.cups.org/newsgroups.php/newsgroups.php?v6055+gcups.bugs Patch, Vendor Advisory

http://www.cups.org/newsgroups.php/newsgroups.php?v6055+gcups.bugs Broken Link, Patch, Vendor Advisory

http://www.cups.org/str.php?L3200 Patch, Vendor Advisory

http://www.cups.org/str.php?L3200 Broken Link, Patch, Vendor Advisory

http://www.debian.org/security/2011/dsa-2176 No Types Assigned

http://www.debian.org/security/2011/dsa-2176 Mailing List

http://www.mandriva.com/security/advisories?name=MDVSA-2010:073 No Types Assigned

http://www.mandriva.com/security/advisories?name=MDVSA-2010:073 Broken Link

http://www.redhat.com/support/errata/RHSA-2009-1595.html No Types Assigned

http://www.redhat.com/support/errata/RHSA-2009-1595.html Broken Link

http://www.securityfocus.com/bid/37048 No Types Assigned

http://www.securityfocus.com/bid/37048 Broken Link, Third Party Advisory, VDB Entry

http://www.ubuntu.com/usn/USN-906-1 No Types Assigned

http://www.ubuntu.com/usn/USN-906-1 Third Party Advisory

http://www.vupen.com/english/advisories/2010/0173 No Types Assigned

http://www.vupen.com/english/advisories/2010/0173 Broken Link

http://www.vupen.com/english/advisories/2011/0535 No Types Assigned

http://www.vupen.com/english/advisories/2011/0535 Broken Link

https://bugzilla.redhat.com/show_bug.cgi?id=530111 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=530111 Issue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11183 No Types Assigned

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11183 Broken Link

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00332.html No Types Assigned

https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00332.html Mailing List

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count.  NOTE: some of these details are obtained from third party information.

Red Hat, Inc. (AV:A/AC:L/Au:N/C:N/I:N/A:P)

CVE-2009-3553 cups: Use-after-free (crash) due improper reference counting in abstract file descriptors handling interface

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information.

https://access.redhat.com/errata/RHSA-2009:1595 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2009-3553 [No Types Assigned]

Red Hat, Inc. (AV:A/AC:L/Au:N/C:N/I:N/A:P)

Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count.  NOTE: some of these details are obtained from third party information.

CVE-2009-3553 cups: Use-after-free (crash) due improper reference counting in abstract file descriptors handling interface

https://access.redhat.com/errata/RHSA-2009:1595 [No Types Assigned]

https://access.redhat.com/security/cve/CVE-2009-3553 [No Types Assigned]

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11183 [No Types Assigned]

http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11183 [No Types Assigned]