critical10.0

CVE-2004-0888

Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a de…

Impact

Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.

Affected products

Vendor	Product	Affected versions
Easy Software Products	Cups	Versions 1.0.4, 1.0.4_8, 1.1.1, 1.1.4, 1.1.4_2, 1.1.4_3
Gnome	Gpdf	Versions 0.112, 0.131
Kde	Koffice	Versions 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3_beta1, 1.3_beta2
Kde	Kpdf	Version 3.2
Pdftohtml	Pdftohtml	Versions 0.32a, 0.32b, 0.33, 0.33a, 0.34, 0.35
Tetex	Tetex	Versions 1.0.7, 2.0, 2.0.1, 2.0.2
Xpdf	Xpdf	Versions 0.90, 0.91, 0.92, 0.93, 1.0, 1.0a
Debian	Debian Linux	Version 3.0
Gentoo	Linux	All versions
Kde	Kde	Versions 3.2, 3.2.1, 3.2.2, 3.2.3, 3.3, 3.3.1
Redhat	Enterprise Linux	Versions 2.1, 3.0
Redhat	Enterprise Linux Desktop	Version 3.0

Impact

Affected products

References