CVE-2009-0577: apple cups Numeric Errors

EPSS trend

Probability

3.58%

Chance of exploitation in the next 30 days

Percentile

89%

Versus all other CVEs

30-day change

0.00 pp

From 3.58% on 18-09-2026

18-09-202618-10-2026

EPSS score

3.58%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

12 links

exchange.xforce.ibmcloud.com/vulnerabilities/48977VDB EntryX Refsource XF
secunia.com/advisories/33995Third Party AdvisoryX Refsource SECUNIAPermissions Required
support.avaya.com/elmodocs2/security/ASA-2009-064.htmX Refsource CONFIRMThird Party Advisory
bugzilla.redhat.com/show_bug.cgi?id=486052X Refsource CONFIRMIssue TrackingREPORT
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9968VDB EntrySignatureX Refsource OVAL
www.redhat.com/support/errata/RHSA-2009-0308.htmlVendor AdvisoryX Refsource REDHATPatch
access.redhat.com/errata/RHSA-2009:0308Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_0308.jsonAdvisory
access.redhat.com/security/cve/CVE-2009-0577REPORT

Show all 12 references

www.cve.org/CVERecord?id=CVE-2009-0577Advisory
nvd.nist.gov/vuln/detail/CVE-2009-0577Advisory

Related vulnerabilities

CVE-2018-4300applecups+21.84%7y ago03-04-2019 17:54The session cookie generated by the CUPS web interface was easy to guess on Linux, allowing unauthorized scripted access to the web interface when the web interface is enabled. This issue affected versions prior to v2.2.10.CVE-2013-6891applecups+30.45%12y ago26-01-2014 01:00lppasswd in CUPS before 1.7.1, when running with setuid privileges, allows local users to read portions of arbitrary files via a modified HOME environment variable and a symlink attack involving .cups/client.conf.CVE-2007-4045applecups+24.59%19y ago27-07-2007 22:00The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service via unspecified vectors related to an incomplete fix for CVE-2007-0720 that introduced a different denial of service problem in SSL negotiation.CVE-2007-3387applecups+388.57%19y ago30-07-2007 23:00Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.CVE-2014-2856applecups+41.63%12y ago18-04-2014 14:00Cross-site scripting (XSS) vulnerability in scheduler/client.c in Common Unix Printing System (CUPS) before 1.7.2 allows remote attackers to inject arbitrary web script or HTML via the URL path, related to the is_path_absolute function.CVE-2014-9679applecups+84.63%11y ago19-02-2015 15:00Integer underflow in the cupsRasterReadPixels function in filter/raster.c in CUPS before 2.0.2 allows remote attackers to have unspecified impact via a malformed compressed raster file, which triggers a buffer overflow.

All vulnerabilities incups

CVE-2009-0577: apple cups Numeric Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References