CVE-2002-1369 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Software Products Cups
7 documents7 sources
Severity
10.0CRITICALNVD
EPSS
10.0%
top 6.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 26
Latest updateApr 30
Description
jobs.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly use the strncat function call when processing the options string, which allows remote attackers to execute arbitrary code via a buffer overflow attack.
CVSS vector
AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0