CVE-2004-0888
Fixed in a distro release EPSS 10%
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
Products: easy_software_products cups, gnome gpdf, kde koffice, kde kpdf, pdftohtml, tetex, xpdf, debian_linux, gentoo linux, kde, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, redhat linux_advanced_workstation, suse_linux, ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.1.22-6 |
| Debian 12 | xpdf | 3.00-9 |
| Debian 13 | cups | 1.1.22-6 |
| Debian 13 | xpdf | 3.00-9 |
| Debian 14 | cups | 1.1.22-6 |
| Debian 14 | xpdf | 3.00-9 |
| Debian 3.0 | cupsys | 1.1.14-5woody10 |
| Debian 3.0 | tetex-bin | 1.0.7+20011202-7.3 |
| Debian 3.0 | xpdf | 1.00-3.2 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.16 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.16 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.16 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.16 |
| Red Hat Enterprise Linux 3 | tetex | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-afm | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-debuginfo | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-dvips | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-fonts | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-latex | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | tetex-xdvi | 0:1.0.7-67.7 |
| Red Hat Enterprise Linux 3 | xpdf | 1:2.02-9.3 |
| Red Hat Enterprise Linux 3 | xpdf-debuginfo | 1:2.02-9.3 |
| Red Hat Enterprise Linux 4 | kdegraphics | 7:3.3.1-3.3 |
| Red Hat Enterprise Linux 4 | kdegraphics-debuginfo | 7:3.3.1-3.3 |
| Red Hat Enterprise Linux 4 | kdegraphics-devel | 7:3.3.1-3.3 |