CVE-2002-1371
Fixed in a distro release EPSS 5%
filters/image-gif.c in Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check for zero-length GIF images, which allows remote attackers to execute arbitrary code via modified chunk headers, as demonstrated by nogif.
Products: easy_software_products cups, apple mac_os_x
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.1.18-1 |
| Debian 13 | cups | 1.1.18-1 |
| Debian 14 | cups | 1.1.18-1 |
| Debian 3.0 | cupsys | 1.1.14-4.3 |