CVE-2002-1275 Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."
HighCVSS 7.5
EPSS 9.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| html2ps project html2ps | = 1.0-b1 | No fix listed |
| html2ps project html2ps | = 1.0-b2 | No fix listed |
| html2ps project html2ps | = 1.0-b3 | No fix listed |
| html2ps project html2ps | = 1.0-b4 | No fix listed |
| html2ps project html2ps | = 1.0-b5 | No fix listed |
| html2ps project html2ps | = 1.0-b6 | No fix listed |
| html2ps project html2ps | = 1.0-b7 | No fix listed |
| debian/html2ps(Debian:12) | < 1.0b3-2 | 1.0b3-2 |
| debian/html2ps(Debian:13) | < 1.0b3-2 | 1.0b3-2 |
| debian/html2ps(Debian:14) | < 1.0b3-2 | 1.0b3-2 |
References
- DSA-192 patch vendor-advisory
- lprng-html2ps-command-execution(10526) vdb-entry vendor-advisory
- SuSE-SA:2002:040 vendor-advisory
- 6079 vdb-entry
- Debian Security Tracker CVE-2002-1275 vendor-advisory