CVE-2009-1196: Apple Cups

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

The directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote attackers to cause a denial of service (cupsd daemon outage or crash) via manipulations of the timing of CUPS browse packets, related to a "pointer use-after-delete flaw."

Affected products

• Apple Cups: version 1.1.17 only; version 1.1.22 only

Published 2009-06-09. Last modified 2026-06-16.