CVE-2002-1384
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18,...
CVE-2002-1384 is a high vulnerability (CVSS 7.2) in Easy Software Products Cups, published January 2, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.69%, the 53rd percentile. Fixed in cups 1.1.18-1.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.69%EPSS, 53rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.1.18-1cups +7 more
Description
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsDebian:12 | before 1.1.18-1 | 1.1.18-1 |
cupsDebian:13 | before 1.1.18-1 | 1.1.18-1 |
cupsDebian:14 | before 1.1.18-1 | 1.1.18-1 |
xpdfDebian:12 | before 2.01-2 | 2.01-2 |
xpdfDebian:13 | before 2.01-2 | 2.01-2 |
xpdfDebian:14 | before 2.01-2 | 2.01-2 |
xpdfDebian:3.0 | before 1.00-3.1 | 1.00-3.1 |
cupsysDebian:3.0 From an advisory covering 8 CVEs | before 1.1.14-4.3 | 1.1.14-4.3 |
What each source reports
NVD Score used
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
CVE-2002-1384- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
CVE-2002-1384- Updated
- 2026-11-02
EUVDEUVD-2002-1368No score
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
EUVD-2002-1368- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9542-fgmx-fgggNo score
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18,...
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
GHSA-9542-fgmx-fggg- Updated
- 2026-11-02
OSVNo score
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
CVE-2002-1384- Updated
- 2026-11-02
OSVDEBIAN-CVE-2002-1384No score
Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.
- Record
DEBIAN-CVE-2002-1384- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
debian.org/security/2003/dsa-232
redhat.com/support/errata/RHSA-2002-295.html
mandrakesoft.com/security/advisories?name=MDKSA-2003:002
novell.com/linux/security/advisories/2003_002_cups.html
securityfocus.com/bid/6475
Show 11 moreShow less
marc.info?l=bugtraq&m=104152282309980&w=2
idefense.com/advisory/12.23.02.txt
exchange.xforce.ibmcloud.com/vulnerabilities/10937
nvd.nist.gov/vuln/detail/CVE-2002-1384
github.com/advisories/GHSA-9542-fgmx-fggg
security-tracker.debian.org/tracker/CVE-2002-1384