CVE-2009-3553

Use-after-free vulnerability in the abstract file-descriptor handling
interface in the cupsdDoSelect function in scheduler/select.c in the
scheduler in cupsd in CUPS 1.3.7 and 1.3.10 allows remote attackers to
cause a denial of service (daemon crash or hang) via a client disconnection
during listing of a large number of print jobs, related to improperly
maintaining a reference count. NOTE: some of these details are obtained
from third party information.

Bugs

• <http://www.cups.org/str.php?L3200&gt;
• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=557740&gt;