CVE-2002-1368 Integer overflow in n/a

What is CVE-2002-1368?

CVE-2002-1368 is a high-severity vulnerability in Apple Mac Os X, published on 20 Dec 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code by causing negative arguments to be fed into memcpy() calls via HTTP requests with (1) a negative Content-Length value or (2) a negative length in a chunked transfer encoding.

Which versions are affected by CVE-2002-1368?

It affects 2 products.

Products include Apple Mac Os X, Easy Software Products Cups.

How do I fix CVE-2002-1368?

Upgrade to a fixed version.

Is CVE-2002-1368 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2002-1368 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Apple Mac Os X

• CVE-2014-7169 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Exploited Critical 9.8
• CVE-2014-6271 GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Exploited Critical 9.8
• CVE-2012-1823 PHP-CGI Query String Parameter Exploited Critical 9.8
• CVE-2021-30713 Apple macOS Unspecified Exploited High 7.8
• CVE-2019-8526 Apple macOS Use-After-Free Exploited High 7.8

All Apple Mac Os X vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2002-1368, GHSA-98r4-fx32-wmfw.