CVE-2009-0577

Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise...

6.8 MediumFix available

Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise Linux (RHEL) 3 allows remote attackers to execute arbitrary code via a crafted PostScript file that triggers a heap-based buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2008-3640.

Exploit likelihood

3.58%Down 2.3 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2009-0577
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-189
Updated: 2026-11-02

CVE List No score

Record: CVE-2009-0577
Updated: 2026-11-02

EUVDEUVD-2009-0581 No score

Record: EUVD-2009-0581
Updated: 2026-11-03

GitHub AdvisoriesGHSA-cjcq-j2gf-3gvx No score

Integer overflow in the WriteProlog function in texttops in CUPS 1.1.17 on Red Hat Enterprise...

Record: GHSA-cjcq-j2gf-3gvx
Updated: 2026-11-02

Affected products

apple cups

Affected packages

Affected packages
Package	Affected	Fixed
`cups` Red Hat:enterprise_linux:3::as	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-debuginfo` Red Hat:enterprise_linux:3::as	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-devel` Red Hat:enterprise_linux:3::as	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-libs` Red Hat:enterprise_linux:3::as	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups` Red Hat:enterprise_linux:3::desktop	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-debuginfo` Red Hat:enterprise_linux:3::desktop	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-devel` Red Hat:enterprise_linux:3::desktop	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-libs` Red Hat:enterprise_linux:3::desktop	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups` Red Hat:enterprise_linux:3::es	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-debuginfo` Red Hat:enterprise_linux:3::es	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56

Show 6 moreShow less

Affected packages
Package	Affected	Fixed
`cups-devel` Red Hat:enterprise_linux:3::es	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-libs` Red Hat:enterprise_linux:3::es	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups` Red Hat:enterprise_linux:3::ws	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-debuginfo` Red Hat:enterprise_linux:3::ws	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-devel` Red Hat:enterprise_linux:3::ws	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56
`cups-libs` Red Hat:enterprise_linux:3::ws	before 1:1.1.17-13.3.56	1:1.1.17-13.3.56

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-0577 is a medium vulnerability (CVSS 6.8) in Apple Cups, published February 20, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.58%, the 89th percentile. Fixed in cups 1:1.1.17-13.3.56.

References

Show 7 moreShow less