Patchwire CVEs, their patch status, and feeds to follow them

CVE-2004-0889

Fixed in a distro release EPSS 6%

Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.

Published 2004-10-26 · CVE record · OSV

Products: easy_software_products cups, gnome gpdf, kde koffice, kde kpdf, pdftohtml, tetex, xpdf, debian_linux, gentoo linux, kde, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, redhat linux_advanced_workstation, suse_linux, ubuntu_linux

Distro releases

ReleasePackageFixed in
Debian 12xpdf3.00-10
Debian 13xpdf3.00-10
Debian 14xpdf3.00-10