CVE-2002-1371: High severity easy software products cups vulnerability
Published Dec 26, 2002
·Updated
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
Affected Software
15 affected components
Easy Software Products Cups=1.1.10
Easy Software Products Cups=1.1.7
Easy Software Products Cups=1.0.4_8
Easy Software Products Cups=1.1.13
Easy Software Products Cups=1.1.17
Easy Software Products Cups=1.1.4_3
Easy Software Products Cups=1.1.4
Easy Software Products Cups=1.1.4_5
Easy Software Products Cups=1.1.1
Easy Software Products Cups=1.0.4
Easy Software Products Cups=1.1.14
Easy Software Products Cups=1.1.4_2
Easy Software Products Cups=1.1.6
Apple iOS and macOS=10.2.2
Apple iOS and macOS=10.2
Event History
Dec 26, 2002
CVE Published
05:00 AM
Sep 1, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1371?
CVE-2002-1371 is considered critical due to the potential for remote code execution.
2
How do I fix CVE-2002-1371?
To mitigate CVE-2002-1371, update CUPS to version 1.1.18 or later, which has addressed the vulnerability.
3
What software versions are affected by CVE-2002-1371?
CVE-2002-1371 affects CUPS versions 1.0.4 to 1.1.17.
4
Can CVE-2002-1371 be exploited remotely?
Yes, CVE-2002-1371 can be exploited remotely by attackers through modified GIF images.
5
What impact does CVE-2002-1371 have on CUPS?
CVE-2002-1371 can lead to arbitrary code execution on systems running vulnerable versions of CUPS.