PT-2002-1015 · Html2Ps · Html2Ps

Published 2002-11-10 · Updated 2012-10-11 · CVE-2002-1275

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions html2ps version 1.0

Description The issue concerns an unknown vulnerability in the html2ps HTML/PostScript converter. It allows remote attackers to execute arbitrary code via unsanitized input. Multiple vulnerabilities in the html2ps package may lead to breaches of confidentiality, integrity, and availability of protected information, and these vulnerabilities can be exploited remotely.

Recommendations For html2ps version 1.0, as a temporary workaround, consider sanitizing the input to prevent the execution of arbitrary code until a patch is available. Restrict access to the html2ps converter to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-02938

CVE-2002-1275

DSA-192

Affected Products

Html2Ps

References · 12

• 🔥 https://exploit-db.com/exploits/21974 · Exploit
• http://iss.net/security_center/static/10526.php · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2002-1275 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2002-1275 · Vendor Advisory
• http://novell.com/linux/security/advisories/2002_040_lprng_html2ps.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1275 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2002-1275 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02938 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1275 · Security Note
• http://debian.org/security/2002/dsa-192 · Vendor Advisory
• http://debian.org/security/dsa-192 · Note
• http://securityfocus.com/bid/6079 · Note