CVE-2002-1383 Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-cok...
HighCVSS 10.0
EPSS 9.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| easy software products cups | = 1.0.4 | No fix listed |
| easy software products cups | = 1.0.4_8 | No fix listed |
| easy software products cups | = 1.1.1 | No fix listed |
| easy software products cups | = 1.1.4 | No fix listed |
| easy software products cups | = 1.1.4_2 | No fix listed |
| easy software products cups | = 1.1.4_3 | No fix listed |
| easy software products cups | = 1.1.4_5 | No fix listed |
| easy software products cups | = 1.1.6 | No fix listed |
| easy software products cups | = 1.1.7 | No fix listed |
| easy software products cups | = 1.1.10 | No fix listed |
| easy software products cups | = 1.1.13 | No fix listed |
| easy software products cups | = 1.1.14 | No fix listed |
| easy software products cups | = 1.1.17 | No fix listed |
| apple mac os x | = 10.2 | No fix listed |
| apple mac os x | = 10.2.2 | No fix listed |
| debian/cups(Debian:12) | < 1.1.18-1 | 1.1.18-1 |
| debian/cups(Debian:13) | < 1.1.18-1 | 1.1.18-1 |
| debian/cups(Debian:14) | < 1.1.18-1 | 1.1.18-1 |
References
- 20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS) mailing-list
- 20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS) mailing-list
- 7756 third-party-advisory
- 7794 third-party-advisory
- 7803 third-party-advisory
- 7843 third-party-advisory
- 7858 third-party-advisory
- 7907 third-party-advisory
- 7913 third-party-advisory
- 8080 third-party-advisory
- 9325 third-party-advisory
- www.idefense.com exploit vendor-advisory
- SuSE-SA:2003:002 vendor-advisory
- RHSA-2002:295 patch vendor-advisory
- Debian Security Tracker CVE-2002-1383 vendor-advisory