CVE-2002-1384
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18,...
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
CVE-2002-1384- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
CVE-2002-1384- Updated
- 2026-11-02
EUVDEUVD-2002-1368 No score
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
EUVD-2002-1368- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9542-fgmx-fggg No score
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18,...
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
GHSA-9542-fgmx-fggg- Updated
- 2026-11-02
OSV No score
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
CVE-2002-1384- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1384 No score
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
DEBIAN-CVE-2002-1384- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsDebian:12 |
before 1.1.18-1 | 1.1.18-1 |
cupsDebian:13 |
before 1.1.18-1 | 1.1.18-1 |
cupsDebian:14 |
before 1.1.18-1 | 1.1.18-1 |
xpdfDebian:12 |
before 2.01-2 | 2.01-2 |
xpdfDebian:13 |
before 2.01-2 | 2.01-2 |
xpdfDebian:14 |
before 2.01-2 | 2.01-2 |
xpdfDebian:3.0 |
before 1.00-3.1 | 1.00-3.1 |
cupsysDebian:3.0 |
before 1.1.14-4.3 | 1.1.14-4.3 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2002-1384 is a high vulnerability (CVSS 7.2) in Easy Software Products Cups, published January 2, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.69%, the 53rd percentile. Fixed in cups 1.1.18-1.
References
debian.org/security/2003/dsa-232
redhat.com/support/errata/RHSA-2002-295.html
mandrakesoft.com/security/advisories?name=MDKSA-2003:002
novell.com/linux/security/advisories/2003_002_cups.html
securityfocus.com/bid/6475
Show 11 moreShow less
marc.info?l=bugtraq&m=104152282309980&w=2
idefense.com/advisory/12.23.02.txt
exchange.xforce.ibmcloud.com/vulnerabilities/10937
nvd.nist.gov/vuln/detail/CVE-2002-1384
github.com/advisories/GHSA-9542-fgmx-fggg
security-tracker.debian.org/tracker/CVE-2002-1384