CVEvulnerability

CVE-2002-1384

7.2 HIGH Published 2003-01-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-01-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.

Affected configurations

• easy software products cups 1.0.4 • easy software products cups 1.0.4 8 • easy software products cups 1.1.1 • easy software products cups 1.1.4 • easy software products cups 1.1.4 2 • easy software products cups 1.1.4 3 • easy software products cups 1.1.4 5 • easy software products cups 1.1.6 • easy software products cups 1.1.7 • easy software products cups 1.1.10 • easy software products cups 1.1.13 • easy software products cups 1.1.14 • easy software products cups 1.1.17 • xpdf xpdf 0.90 • xpdf xpdf 0.91 • xpdf xpdf 1.0 • xpdf xpdf 1.0a • xpdf xpdf 1.1 • xpdf xpdf 2.0 • xpdf xpdf 2.1

References