CVE-2002-1383 describes multiple integer overflow vulnerabilities in CUPS versions 1.1.14 through 1.1.17, impacting Apple CUPS, Apple Mac OS X, and Easy Software Products CUPS. This critical vulnerability, with a CVSS score of 10.0, allows unauthenticated remote attackers to execute arbitrary code via the CUPSd HTTP interface or image handling code in CUPS filters. While there is no evidence of active exploitation or public exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0.4CPE matchmatch criteria | cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:* | ||
1.0.4_8CPE matchmatch criteria | cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:* | ||
1.1.1CPE matchmatch criteria | cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:* | ||
1.1.4CPE matchmatch criteria | cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:* | ||
1.1.4_2CPE matchmatch criteria | cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.