PT-2002-3148 · Apple · Cups
Publicado
1970-01-01
·
Atualizado
2017-10-10
·
CVE-2002-1371
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
CUPS versions 1.1.14 through 1.1.17
Description
The issue concerns multiple vulnerabilities in the CUPS package, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Specifically, the
filters/image-gif.c component does not properly check for zero-length GIF images, allowing remote attackers to execute arbitrary code via modified chunk headers.Recommendations
For CUPS versions 1.1.14 through 1.1.17, consider disabling the
filters/image-gif.c component or restricting access to it until a patch is available. As a temporary workaround, avoid using the affected CUPS functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Cups