VDB
CVE-2002-1384
CVE-2002-1384
PUBLISHED
Reported by mitre · Published September 1, 2004
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, *, * |
Timeline
- Jan 2, 2003 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 30, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 16, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Oct 31, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 15, 2023 EPSS Score
- Apr 9, 2023 EPSS Score
- Jun 2, 2023 EPSS Score
- Jul 26, 2023 EPSS Score
References
- DSA-232 vendor-advisoryx_refsource_DEBIAN
- RHSA-2002:295 vendor-advisoryx_refsource_REDHAT
- MDKSA-2003:002 vendor-advisoryx_refsource_MANDRAKE
- SUSE-SA:2003:002 vendor-advisoryx_refsource_SUSE
- 6475 vdb-entryx_refsource_BID
- MDKSA-2003:001 vendor-advisoryx_refsource_MANDRAKE
- GLSA-200301-1 vendor-advisoryx_refsource_GENTOO
- x_refsource_MISC
- RHSA-2002:307 vendor-advisoryx_refsource_REDHAT
- pdftops-integer-overflow(10937) vdb-entryx_refsource_XF
- RHSA-2003:216 vendor-advisoryx_refsource_REDHAT
- DSA-226 vendor-advisoryx_refsource_DEBIAN
- RHSA-2003:037 vendor-advisoryx_refsource_REDHAT
- DSA-222 vendor-advisoryx_refsource_DEBIAN