7.5

CVE-2002-1368

Exploit

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.

Data is provided by the National Vulnerability Database (NVD)
Easy Software Products ≫ Cups Version1.0.4
Easy Software Products ≫ Cups Version1.0.4_8
Easy Software Products ≫ Cups Version1.1.1
Easy Software Products ≫ Cups Version1.1.4
Easy Software Products ≫ Cups Version1.1.4_2
Easy Software Products ≫ Cups Version1.1.4_3
Easy Software Products ≫ Cups Version1.1.4_5
Easy Software Products ≫ Cups Version1.1.6
Easy Software Products ≫ Cups Version1.1.7
Easy Software Products ≫ Cups Version1.1.10
Easy Software Products ≫ Cups Version1.1.13
Easy Software Products ≫ Cups Version1.1.14
Easy Software Products ≫ Cups Version1.1.17
Apple ≫ macOS X Version10.2
Apple ≫ macOS X Version10.2.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 26.75% 0.959
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P