CVE catalog

CVE-2002-1275

html2ps: CVE-2002-1275

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
9.25% · Oct 25, 2026

Unknown vulnerability in html2ps HTML/PostScript converter 1.0, when used within LPRng, allows remote attackers to execute arbitrary code via "unsanitized input."

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianhtml2pssid1.0b7-7fixed
Debianhtml2psforky1.0b7-7fixed
Debianhtml2pstrixie1.0b7-6fixed
Debianhtml2psbookworm1.0b7-6fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianhtml2pssourcesid1.0b3-2not yet assignedNot reportedNot reported
Debianhtml2pssourceforky1.0b3-2not yet assignedNot reportedNot reported
Debianhtml2pssourcetrixie1.0b3-2not yet assignedNot reportedNot reported
Debianhtml2pssourcebookworm1.0b3-2not yet assignedNot reportedNot reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [html2ps]Fixed
    Details (2)
    • 1.0b7-6 · all · bookworm

      Fixed · Fixed: 1.0b3-2

      dsa · html2ps · debian · bookworm; dsa · html2ps · debian · 12

    • 1.0b7-6 · all · bookworm

      Fixed · Fixed: 1.0b3-2

      dsa · html2ps · debian · bookworm; dsa · html2ps · debian · 12

  • [xhtml2ps]Fixed

    Source package: [html2ps]

    Details (2)
    • 1.0b7-6 · all · bookworm

      Fixed · Fixed: 1.0b3-2

      dsa · html2ps · debian · bookworm; dsa · html2ps · debian · 12

    • 1.0b7-6 · all · bookworm

      Fixed · Fixed: 1.0b3-2

      dsa · html2ps · debian · bookworm; dsa · html2ps · debian · 12

[Debian 13 (Trixie)]

  • [html2ps]Fixed
    Details (2)
    • 1.0b7-6 · all · trixie

      Fixed · Fixed: 1.0b3-2

      dsa · html2ps · debian · 13

    • 1.0b7-6 · all · trixie

      Fixed · Fixed: 1.0b3-2

      dsa · html2ps · debian · 13

  • [xhtml2ps]Fixed

    Source package: [html2ps]

    Details (2)
    • 1.0b7-6 · all · trixie

      Fixed · Fixed: 1.0b3-2

      dsa · html2ps · debian · 13

    • 1.0b7-6 · all · trixie

      Fixed · Fixed: 1.0b3-2

      dsa · html2ps · debian · 13

Observed:

References