CVE Vulnerabilities

CVE-2002-1384

Published: Jan 02, 2003 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.

Affected Software

NameVendorStart VersionEnd Version
CupsEasy_software_products1.0.4 (including)1.0.4 (including)
CupsEasy_software_products1.0.4_8 (including)1.0.4_8 (including)
CupsEasy_software_products1.1.1 (including)1.1.1 (including)
CupsEasy_software_products1.1.4 (including)1.1.4 (including)
CupsEasy_software_products1.1.4_2 (including)1.1.4_2 (including)
CupsEasy_software_products1.1.4_3 (including)1.1.4_3 (including)
CupsEasy_software_products1.1.4_5 (including)1.1.4_5 (including)
CupsEasy_software_products1.1.6 (including)1.1.6 (including)
CupsEasy_software_products1.1.7 (including)1.1.7 (including)
CupsEasy_software_products1.1.10 (including)1.1.10 (including)
CupsEasy_software_products1.1.13 (including)1.1.13 (including)
CupsEasy_software_products1.1.14 (including)1.1.14 (including)
CupsEasy_software_products1.1.17 (including)1.1.17 (including)
XpdfXpdf0.90 (including)0.90 (including)
XpdfXpdf0.91 (including)0.91 (including)
XpdfXpdf1.0 (including)1.0 (including)
XpdfXpdf1.0a (including)1.0a (including)
XpdfXpdf1.1 (including)1.1 (including)
XpdfXpdf2.0 (including)2.0 (including)
XpdfXpdf2.1 (including)2.1 (including)
Red Hat Enterprise Linux AS (Advanced Server) version 2.1RedHat*
Red Hat Linux 6.2RedHat*
Red Hat Linux 7.0RedHat*
Red Hat Linux 7.1RedHat*
Red Hat Linux 7.1RedHat*
Red Hat Linux 7.2RedHat*
Red Hat Linux 7.3RedHat*
Red Hat Linux 7.3RedHat*
Red Hat Linux 8.0RedHat*
Red Hat Linux 8.0RedHat*
Red Hat Linux Advanced Workstation 2.1RedHat*

References