CVE-2002-1383

CUPS 1.1.14-1.1.17 - Remote Code Execution via Integer Overflow

Title source: llm
STIX 2.1

Description

Multiple integer overflows in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allow remote attackers to execute arbitrary code via (1) the CUPSd HTTP interface, as demonstrated by vanilla-coke, and (2) the image handling code in CUPS filters, as demonstrated by mksun.

References (15)

Core 15
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/7858
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/7843
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/9325/
Various Sources vendor-advisory x_refsource_caldera
ftp://ftp.sco.com/pub/security/OpenLinux/CSSA-2003-004.0.txt
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/7756/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/7907
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/7913/
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/7794
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2003_002_cups.html
Exploit, Vendor Advisory x_refsource_misc
http://www.idefense.com/advisory/12.19.02.txt
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2002-295.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/7803
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/8080/
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=104032149026670&w=2

Scores

EPSS 0.0906
EPSS Percentile 94.8%

Details

Status published
Products (15)
apple/mac_os_x 10.2
apple/mac_os_x 10.2.2
easy_software_products/cups 1.0.4
easy_software_products/cups 1.0.4_8
easy_software_products/cups 1.1.1
easy_software_products/cups 1.1.4
easy_software_products/cups 1.1.4_2
easy_software_products/cups 1.1.4_3
easy_software_products/cups 1.1.4_5
easy_software_products/cups 1.1.6
... and 5 more
Published Dec 26, 2002
Tracked Since Feb 18, 2026