CVEvulnerability
CVE-2004-0888
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-01-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
Affected configurations
• easy software products cups 1.0.4
• easy software products cups 1.0.4 8
• easy software products cups 1.1.1
• easy software products cups 1.1.4
• easy software products cups 1.1.4 2
• easy software products cups 1.1.4 3
• easy software products cups 1.1.4 5
• easy software products cups 1.1.6
• easy software products cups 1.1.7
• easy software products cups 1.1.10
• easy software products cups 1.1.12
• easy software products cups 1.1.13
• easy software products cups 1.1.14
• easy software products cups 1.1.15
• easy software products cups 1.1.16
• easy software products cups 1.1.17
• easy software products cups 1.1.18
• easy software products cups 1.1.19
• easy software products cups 1.1.19 rc5
• easy software products cups 1.1.20
• gnome gpdf 0.112
• gnome gpdf 0.131
• kde koffice 1.3
• kde koffice 1.3.1
• kde koffice 1.3.2
• kde koffice 1.3.3
• kde koffice 1.3 beta1
• kde koffice 1.3 beta2
• kde koffice 1.3 beta3
• kde kpdf 3.2
• pdftohtml pdftohtml 0.32a
• pdftohtml pdftohtml 0.32b
• pdftohtml pdftohtml 0.33
• pdftohtml pdftohtml 0.33a
• pdftohtml pdftohtml 0.34
• pdftohtml pdftohtml 0.35
• pdftohtml pdftohtml 0.36
• tetex tetex 1.0.7
• tetex tetex 2.0
• tetex tetex 2.0.1
• tetex tetex 2.0.2
• xpdf xpdf 0.90
• xpdf xpdf 0.91
• xpdf xpdf 0.92
• xpdf xpdf 0.93
• xpdf xpdf 1.0
• xpdf xpdf 1.0a
• xpdf xpdf 1.1
• xpdf xpdf 2.0
• xpdf xpdf 2.1
• xpdf xpdf 2.3
• xpdf xpdf 3.0
• debian debian linux 3.0
• gentoo linux
• kde kde 3.2
• kde kde 3.2.1
• kde kde 3.2.2
• kde kde 3.2.3
• kde kde 3.3
• kde kde 3.3.1
… and 12 more
References
- http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886 distro.conectiva.com.br
- http://marc.info/?l=bugtraq&m=109880927526773&w=2 marc.info
- http://marc.info/?l=bugtraq&m=110815379627883&w=2 marc.info
- http://www.debian.org/security/2004/dsa-573 www.debian.org
- http://www.debian.org/security/2004/dsa-581 www.debian.org
- http://www.debian.org/security/2004/dsa-599 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml www.gentoo.org
- http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:113 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:114 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:115 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:116 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2004-543.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2004-592.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-066.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-354.html www.redhat.com
- http://www.securityfocus.com/bid/11501 Patch, Vendor Advisory
- https://bugzilla.fedora.us/show_bug.cgi?id=2353 bugzilla.fedora.us
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17818 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9714 oval.cisecurity.org
- https://www.ubuntu.com/usn/usn-9-1/ www.ubuntu.com
- http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886 distro.conectiva.com.br
- http://marc.info/?l=bugtraq&m=109880927526773&w=2 marc.info
- http://marc.info/?l=bugtraq&m=110815379627883&w=2 marc.info
- http://www.debian.org/security/2004/dsa-573 www.debian.org
- http://www.debian.org/security/2004/dsa-581 www.debian.org
- http://www.debian.org/security/2004/dsa-599 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml www.gentoo.org
- http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:113 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:114 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:115 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:116 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2004-543.html Patch, Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2004-592.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-066.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2005-354.html www.redhat.com
- http://www.securityfocus.com/bid/11501 Patch, Vendor Advisory
- https://bugzilla.fedora.us/show_bug.cgi?id=2353 bugzilla.fedora.us
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17818 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9714 oval.cisecurity.org
- https://www.ubuntu.com/usn/usn-9-1/ www.ubuntu.com