Login Request a demo
Unscored severity · published Mar 8, 2002
CVE-2002-0063
Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values
–
CVSS
3.8%
EPSS
No
On KEV
Description
Buffer overflow in ippRead function of CUPS before 1.1.14 may allow attackers to execute arbitrary code via long attribute names or language values.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
Cups · Easy Software Products
through 1.1.14 · source: NVD
Affected product
CU
Cups
Easy Software Products
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0063
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0063
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000471
lists2.suse.com
http://lists2.suse.com/archive/suse-security-announce/2001-Mar/0000.html
Vendor Advisory
http://www.cups.org/relnotes.html
Patch
http://www.debian.org/security/2002/dsa-110
Patch
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-015.php
More from Cups
–
CVE-2008-1373
Buffer overflow in the gif_read_lzw function in CUPS 1.3.6 allows remote attackers to have an unknown impact via a GIF file with a large code_size value, a similar issue to…
–
CVE-2008-0596
Memory leak in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of…
–
CVE-2008-0597
Use-after-free vulnerability in CUPS before 1.1.22, and possibly other versions, allows remote attackers to cause a denial of service (crash) via crafted IPP packets
–
CVE-2007-5849
Integer underflow in the asn1_get_string function in the SNMP back end (backend/snmp.c) for CUPS 1.2 through 1.3.4 allows remote attackers to execute arbitrary code via a crafted…
–
CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via…