CVEvulnerability
CVE-2004-0889
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-01-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.
Affected configurations
• easy software products cups 1.0.4
• easy software products cups 1.0.4 8
• easy software products cups 1.1.1
• easy software products cups 1.1.4
• easy software products cups 1.1.4 2
• easy software products cups 1.1.4 3
• easy software products cups 1.1.4 5
• easy software products cups 1.1.6
• easy software products cups 1.1.7
• easy software products cups 1.1.10
• easy software products cups 1.1.12
• easy software products cups 1.1.13
• easy software products cups 1.1.14
• easy software products cups 1.1.15
• easy software products cups 1.1.16
• easy software products cups 1.1.17
• easy software products cups 1.1.18
• easy software products cups 1.1.19
• easy software products cups 1.1.19 rc5
• easy software products cups 1.1.20
• gnome gpdf 0.112
• gnome gpdf 0.131
• kde koffice 1.3
• kde koffice 1.3.1
• kde koffice 1.3.2
• kde koffice 1.3.3
• kde koffice 1.3 beta1
• kde koffice 1.3 beta2
• kde koffice 1.3 beta3
• kde kpdf 3.2
• pdftohtml pdftohtml 0.32a
• pdftohtml pdftohtml 0.32b
• pdftohtml pdftohtml 0.33
• pdftohtml pdftohtml 0.33a
• pdftohtml pdftohtml 0.34
• pdftohtml pdftohtml 0.35
• pdftohtml pdftohtml 0.36
• tetex tetex 1.0.7
• tetex tetex 2.0
• tetex tetex 2.0.1
• tetex tetex 2.0.2
• xpdf xpdf 0.90
• xpdf xpdf 0.91
• xpdf xpdf 0.92
• xpdf xpdf 0.93
• xpdf xpdf 1.0
• xpdf xpdf 1.0a
• xpdf xpdf 1.1
• xpdf xpdf 2.0
• xpdf xpdf 2.1
• xpdf xpdf 2.3
• xpdf xpdf 3.0
• debian debian linux 3.0
• gentoo linux
• kde kde 3.2
• kde kde 3.2.1
• kde kde 3.2.2
• kde kde 3.2.3
• kde kde 3.3
• kde kde 3.3.1
… and 12 more
References
- http://marc.info/?l=bugtraq&m=109880927526773&w=2 marc.info
- http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:113 www.mandriva.com
- http://www.securityfocus.com/bid/11501 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17819 exchange.xforce.ibmcloud.com
- http://marc.info/?l=bugtraq&m=109880927526773&w=2 marc.info
- http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml Patch, Vendor Advisory
- http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml www.gentoo.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2004:113 www.mandriva.com
- http://www.securityfocus.com/bid/11501 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17819 exchange.xforce.ibmcloud.com