CVE-2004-0888

2005-01-2705:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2004-0888

xpdf

integer overflow

denial of service

arbitrary code execution

cups

gpdf

kdegraphics

7.6 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.07 Low

EPSS

Percentile

93.9%

JSON

Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.

CPENameOperatorVersion
pdftohtml:pdftohtmlpdftohtmleq0.32a
easy_software_products:cupseasy software products cupseq1.1.19_rc5
xpdf:xpdfxpdfeq2.0
easy_software_products:cupseasy software products cupseq1.1.10
easy_software_products:cupseasy software products cupseq1.1.16
xpdf:xpdfxpdfeq1.0
kde:kofficekde kofficeeq1.3_beta2
easy_software_products:cupseasy software products cupseq1.1.7
pdftohtml:pdftohtmlpdftohtmleq0.35
xpdf:xpdfxpdfeq0.91

CPE	Name	Operator	Version
pdftohtml:pdftohtml	pdftohtml	eq	0.32a
easy_software_products:cups	easy software products cups	eq	1.1.19_rc5
xpdf:xpdf	xpdf	eq	2.0
easy_software_products:cups	easy software products cups	eq	1.1.10
easy_software_products:cups	easy software products cups	eq	1.1.16
xpdf:xpdf	xpdf	eq	1.0
kde:koffice	kde koffice	eq	1.3_beta2
easy_software_products:cups	easy software products cups	eq	1.1.7
pdftohtml:pdftohtml	pdftohtml	eq	0.35
xpdf:xpdf	xpdf	eq	0.91