PT-2002-3150 · Apple · Cups

Publicado

1970-01-01

·

Atualizado

2016-10-18

·

CVE-2002-1383

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions CUPS versions 1.1.14 through 1.1.17
Description The issue involves multiple integer overflows in the Common Unix Printing System (CUPS), which can be exploited remotely to execute arbitrary code. This can lead to a breach of confidentiality, integrity, and availability of protected information. The exploitation can occur via the CUPSd HTTP interface and the image handling code in CUPS filters.
Recommendations For CUPS versions 1.1.14 through 1.1.17, consider disabling the CUPSd HTTP interface and restricting access to the image handling code in CUPS filters until a patch is available. As a temporary workaround, restrict access to the vulnerable CUPS filters to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

BDU:2015-01804
BDU:2015-01805
BDU:2015-07982
BDU:2015-07983
BDU:2015-07984
BDU:2015-07985
BDU:2015-07986
BDU:2015-07987
CVE-2002-1383
DSA-232

Produtos afetados

Cups