CVE-2002-1371
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly...
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
Exploit likelihood
What each source reports
NVD Score used
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
- Record
CVE-2002-1371- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
- Record
CVE-2002-1371- Updated
- 2026-11-02
EUVDEUVD-2002-1355 No score
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
- Record
EUVD-2002-1355- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v85m-c74w-mhg8 No score
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly...
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
- Record
GHSA-v85m-c74w-mhg8- Updated
- 2026-11-02
OSV No score
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
- Record
CVE-2002-1371- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1371 No score
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
- Record
DEBIAN-CVE-2002-1371- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1371 is a high vulnerability (CVSS 7.5) in Easy Software Products Cups, published December 26, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.92%, the 92nd percentile. Fixed in cups 1.1.18-1.
References
archives.neohapsis.com/archives/vulnwatch/2002-q4/0117.html
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000702
debian.org/security/2003/dsa-232
novell.com/linux/security/advisories/2003_002_cups.html
idefense.com/advisory/12.19.02.txt
redhat.com/support/errata/RHSA-2002-295.html
Show 7 moreShow less
marc.info?l=bugtraq&m=104032149026670&w=2
mandrakesoft.com/security/advisories?name=MDKSA-2003:001
exchange.xforce.ibmcloud.com/vulnerabilities/10911
securityfocus.com/bid/6439
nvd.nist.gov/vuln/detail/CVE-2002-1371
github.com/advisories/GHSA-v85m-c74w-mhg8
security-tracker.debian.org/tracker/CVE-2002-1371