Published: 02/01/2003 Updated: 03/05/2018

CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9

VMScore: 641

Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Integer overflow in pdftops, as used in Xpdf 2.01 and previous versions, xpdf-i, and CUPS prior to 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.

Vulnerable Product	Search on Vulmon	Subscribe to Product
easy software products cups 1.0.4
easy software products cups 1.1.4
easy software products cups 1.1.4_2
xpdf xpdf 1.0a
xpdf xpdf 1.1
easy software products cups 1.0.4_8
easy software products cups 1.1.1
easy software products cups 1.1.4_3
easy software products cups 1.1.4_5
xpdf xpdf 2.0
xpdf xpdf 2.1
easy software products cups 1.1.10
easy software products cups 1.1.13
easy software products cups 1.1.6
easy software products cups 1.1.7
xpdf xpdf 0.90
easy software products cups 1.1.14
easy software products cups 1.1.17
xpdf xpdf 0.91
xpdf xpdf 1.0

iDEFENSE discovered an integer overflow in the pdftops filter from the xpdf package that can be exploited to gain the privileges of the target user This can lead to gaining unauthorized access to the 'lp' user if the pdftops program is part of the print filter For the current stable distribution (woody) this problem has been fixed in version 100 ...

Multiple vulnerabilities were discovered in the Common Unix Printing System (CUPS) Several of these issues represent the potential for a remote compromise or denial of service The Common Vulnerabilities and Exposures project identifies the following problems: CAN-2002-1383: Multiple integer overflows allow a remote attacker to execute arbitr ...

NVD-CWE-Other http://www.idefense.com/advisory/12.23.02.txt http://www.debian.org/security/2003/dsa-222 http://www.debian.org/security/2003/dsa-226 http://www.debian.org/security/2003/dsa-232 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:001 http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:002 http://www.redhat.com/support/errata/RHSA-2002-295.html http://www.redhat.com/support/errata/RHSA-2002-307.html http://www.redhat.com/support/errata/RHSA-2003-037.html http://www.redhat.com/support/errata/RHSA-2003-216.html http://www.novell.com/linux/security/advisories/2003_002_cups.html http://www.securityfocus.com/bid/6475 http://marc.info/?l=bugtraq&m=104152282309980&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/10937 https://nvd.nist.gov https://www.debian.org/security/./dsa-222

CVE-2002-1384

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect