NetSight
IP …
critical10.0

CVE-2004-0889

Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and pos…

Impact

Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.

Affected products

VendorProductAffected versions
Easy Software ProductsCups
Versions 1.0.4, 1.0.4_8, 1.1.1, 1.1.4, 1.1.4_2, 1.1.4_3
GnomeGpdf
Versions 0.112, 0.131
KdeKoffice
Versions 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3_beta1, 1.3_beta2
KdeKpdf
Version 3.2
PdftohtmlPdftohtml
Versions 0.32a, 0.32b, 0.33, 0.33a, 0.34, 0.35
TetexTetex
Versions 1.0.7, 2.0, 2.0.1, 2.0.2
XpdfXpdf
Versions 0.90, 0.91, 0.92, 0.93, 1.0, 1.0a
DebianDebian Linux
Version 3.0
GentooLinux
All versions
KdeKde
Versions 3.2, 3.2.1, 3.2.2, 3.2.3, 3.3, 3.3.1
RedhatEnterprise Linux
Versions 2.1, 3.0
RedhatEnterprise Linux Desktop
Version 3.0

References