PT-2002-3148 · Apple · Cups

Published 1970-01-01 · Updated 2017-10-10 · CVE-2002-1371

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CUPS versions 1.1.14 through 1.1.17

Description The issue concerns multiple vulnerabilities in the CUPS package, which can lead to breaches of confidentiality, integrity, and availability of protected information. These vulnerabilities can be exploited remotely. Specifically, the filters/image-gif.c component does not properly check for zero-length GIF images, allowing remote attackers to execute arbitrary code via modified chunk headers.

Recommendations For CUPS versions 1.1.14 through 1.1.17, consider disabling the filters/image-gif.c component or restricting access to it until a patch is available. As a temporary workaround, avoid using the affected CUPS functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

BDU:2015-01804

BDU:2015-01805

BDU:2015-07982

BDU:2015-07983

BDU:2015-07984

BDU:2015-07985

BDU:2015-07986

BDU:2015-07987

CVE-2002-1371

DSA-232

Affected Products

Cups

References · 34

• 🔥 http://idefense.com/advisory/12.19.02.txt · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1384 · Security Note
• https://bdu.fstec.ru/vul/2015-07984 · Security Note
• http://redhat.com/support/errata/RHSA-2002-295.html · Vendor Advisory
• http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000702 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1368 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2002-1371 · Security Note
• https://bdu.fstec.ru/vul/2015-07986 · Security Note
• http://debian.org/security/2003/dsa-232 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07985 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2002-1371 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-07983 · Security Note
• https://bdu.fstec.ru/vul/2015-01805 · Security Note
• http://novell.com/linux/security/advisories/2003_002_cups.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1383 · Security Note