CVE-2002-1368

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

15.47% chance of exploitation in the next 30 days, 97th percentile

Published

2002-12-20

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/22106

References

• CVE Record
• NVD entry

Related

• CVE-2002-1364
• CVE-2002-1374
• CVE-2002-1361
• CVE-2002-1375
• CVE-2002-1359
• CVE-2002-1380