CVE-2002-1384

published 2003-01-02

CVE-2002-1384: Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace…

Priority P4 20 high 7.2 CVSS 2.0

AV L AC L Au N C C I C A C

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.

Affected

30 ranges · showing 25

Vendor	Product	Version range	Fixed in
apple	cups	>= 0 < 1.1.18-1	1.1.18-1
apple	cups	>= 0 < 1.1.18-1	1.1.18-1
apple	cups	>= 0 < 1.1.18-1	1.1.18-1
apple	cups	>= 0 < 1.1.18-1	1.1.18-1
debian	cups	< cups 1.1.18-1 (bookworm)	cups 1.1.18-1 (bookworm)
debian	xpdf	< cups 1.1.18-1 (bookworm)	cups 1.1.18-1 (bookworm)
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
easy_software_products	cups	—	—
xpdf	xpdf	—	—
xpdf	xpdf	—	—
xpdf	xpdf	—	—
xpdf	xpdf	—	—
xpdf	xpdf	—	—
xpdf	xpdf	—	—

CVSS provenance

nvd v2.0 7.2 HIGH AV:L/AC:L/Au:N/C:C/I:C/A:C

osv 7.2 HIGH

vendor_debian 7.2 HIGH

vendor_redhat 7.2 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.