CVE-2004-0889
Fixed in a distro release EPSS 6%
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.
Products: easy_software_products cups, gnome gpdf, kde koffice, kde kpdf, pdftohtml, tetex, xpdf, debian_linux, gentoo linux, kde, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, redhat linux_advanced_workstation, suse_linux, ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xpdf | 3.00-10 |
| Debian 13 | xpdf | 3.00-10 |
| Debian 14 | xpdf | 3.00-10 |