Integer Overflow Vulnerability in pdftops of Xpdf and CUPS
CVE-2002-1384

Currently unrated

Key Information:

Vendor: XPDF
Status: XPDF; Cups
Vendor: CVE Published:; 2 January 2003

What is CVE-2002-1384?

An integer overflow vulnerability exists in the pdftops utility, utilized in Xpdf and CUPS versions prior to 1.1.18. This flaw allows local users to exploit the ColorSpace entry when it contains an excessively large number of elements. Successful exploitation could lead to the execution of arbitrary code, potentially compromising the integrity of the affected system. Users of Xpdf and CUPS should ensure they are running the latest, patched versions to mitigate this risk.

References

http://www.debian.org/security/2003/dsa-232

vendor-advisoryx_refsource_DEBIAN

http://www.redhat.com/support/errata/RHSA-2002-295.html

vendor-advisoryx_refsource_REDHAT

http://www.mandrakesoft.com/security/advisories?name=MDKS...

vendor-advisoryx_refsource_MANDRAKE

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 2, 2003
Vulnerability Reserved
Dec 18, 2002

CVE-2002-1384 Data

JSON

XPDF

What is CVE-2002-1384?

References

Timeline