Patchwire CVEs, their patch status, and feeds to follow them

CVE-2002-1384

Fixed in a distro release EPSS <1%

Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf.

Published 2004-09-01 · CVE record · OSV

Products: easy_software_products cups, xpdf

Distro releases

ReleasePackageFixed in
Debian 12cups1.1.18-1
Debian 12xpdf2.01-2
Debian 13cups1.1.18-1
Debian 13xpdf2.01-2
Debian 14cups1.1.18-1
Debian 14xpdf2.01-2
Debian 3.0cupsys1.1.14-4.3
Debian 3.0xpdf1.00-3.1