CVE-2002-1371

Severity

75%

Complexity

99%

Confidentiality

106%

filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.

filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.

CVSS 2.0 Base Score 7.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:P/I:P/A:P).

Overview

First reported 22 years ago

2002-12-26 05:00:00

Last updated 7 years ago

2017-10-10 01:30:00

Affected Software

Apple Mac OS X 10.2

10.2

Apple Mac OS X 10.2.2

10.2.2

References

20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)

CLSA-2003:702

20021219 iDEFENSE Security Advisory 12.19.02: Multiple Security Vulnerabilities in Common Unix Printing System (CUPS)

DSA-232

http://www.idefense.com/advisory/12.19.02.txt

Exploit, Vendor Advisory

MDKSA-2003:001

SuSE-SA:2003:002

RHSA-2002:295

6439

cups-zero-width-images(10911)

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.