PT-2002-1015 · Html2Ps · Html2Ps

Publicado 2002-11-10 · Atualizado 2012-10-11 · CVE-2002-1275

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions html2ps version 1.0

Description The issue concerns an unknown vulnerability in the html2ps HTML/PostScript converter. It allows remote attackers to execute arbitrary code via unsanitized input. Multiple vulnerabilities in the html2ps package may lead to breaches of confidentiality, integrity, and availability of protected information, and these vulnerabilities can be exploited remotely.

Recommendations For html2ps version 1.0, as a temporary workaround, consider sanitizing the input to prevent the execution of arbitrary code until a patch is available. Restrict access to the html2ps converter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

BDU:2015-02938

CVE-2002-1275

DSA-192

Produtos afetados

Html2Ps

Referências · 12

• 🔥 https://exploit-db.com/exploits/21974 · Exploit
• http://iss.net/security_center/static/10526.php · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1275 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2002-1275 · Aviso do Fabricante
• http://novell.com/linux/security/advisories/2002_040_lprng_html2ps.html · Aviso do Fabricante
• http://debian.org/security/dsa-192 · Nota
• http://securityfocus.com/bid/6079 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1275 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2002-1275 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-02938 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1275 · Nota de Segurança
• http://debian.org/security/2002/dsa-192 · Aviso do Fabricante