p PatchFirst

CVE-2002-1384

CVE-2002-1384

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.

EPSS 0.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • cups Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.1.18-1

    Update to 1.1.18-1

  • cups Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.1.18-1

    Update to 1.1.18-1

  • cups Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.1.18-1

    Update to 1.1.18-1

  • xpdf Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.01-2

    Update to 2.01-2

  • xpdf Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.01-2

    Update to 2.01-2

  • xpdf Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.01-2

    Update to 2.01-2

Original sources

Check your server →