CVE-2009-2807
published 2009-09-14CVE-2009-2807: Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors.
PriorityP427high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.37%
29.7th percentile
Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | mac_os_x | — | — |
| apple | mac_os_x_server | — | — |
| debian | cups | — | — |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
vendor_debian7.2LOW
vendor_redhat6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9vjx-w5p4-4vg6: Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10
ghsa_unreviewed·2022-05-02
CVE-2009-2807 [HIGH] CWE-119 GHSA-9vjx-w5p4-4vg6: Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10
Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors.
Red Hat
eggdrop DoS (crash)
vendor_redhat·2009-05-26·CVSS 6.8
CVE-2009-1789 [MEDIUM] eggdrop DoS (crash)
eggdrop DoS (crash)
mod/server.mod/servmsg.c in Eggheads Eggdrop and Windrop 1.6.19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted PRIVMSG that causes an empty string to trigger a negative string length copy. NOTE: this issue exists because of an incorrect fix for CVE-2007-2807.
Debian
CVE-2009-2807: cups - Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 a...
vendor_debian·2009·CVSS 7.2
CVE-2009-2807 [HIGH] CVE-2009-2807: cups - Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 a...
Heap-based buffer overflow in the USB backend in CUPS in Apple Mac OS X 10.5.8 allows local users to gain privileges via unspecified vectors.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.htmlhttp://osvdb.org/57951http://secunia.com/advisories/36701http://support.apple.com/kb/HT3865http://www.cups.org/articles.php?L588http://www.securityfocus.com/bid/36350http://www.securitytracker.com/id?1022898https://exchange.xforce.ibmcloud.com/vulnerabilities/53168http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.htmlhttp://osvdb.org/57951http://secunia.com/advisories/36701http://support.apple.com/kb/HT3865http://www.cups.org/articles.php?L588http://www.securityfocus.com/bid/36350http://www.securitytracker.com/id?1022898https://exchange.xforce.ibmcloud.com/vulnerabilities/53168
2009-09-14
Published