Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2004-0888
HistoryJan 27, 2005 - 5:00 a.m.

CVE-2004-0888

2005-01-2705:00:00
[email protected]
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.07 Low

EPSS

Percentile

94.0%

JSON

Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.

Affected configurations

NVD
Node
easy_software_productscupsMatch1.0.4
OR
easy_software_productscupsMatch1.0.4_8
OR
easy_software_productscupsMatch1.1.1
OR
easy_software_productscupsMatch1.1.4
OR
easy_software_productscupsMatch1.1.4_2
OR
easy_software_productscupsMatch1.1.4_3
OR
easy_software_productscupsMatch1.1.4_5
OR
easy_software_productscupsMatch1.1.6
OR
easy_software_productscupsMatch1.1.7
OR
easy_software_productscupsMatch1.1.10
OR
easy_software_productscupsMatch1.1.12
OR
easy_software_productscupsMatch1.1.13
OR
easy_software_productscupsMatch1.1.14
OR
easy_software_productscupsMatch1.1.15
OR
easy_software_productscupsMatch1.1.16
OR
easy_software_productscupsMatch1.1.17
OR
easy_software_productscupsMatch1.1.18
OR
easy_software_productscupsMatch1.1.19
OR
easy_software_productscupsMatch1.1.19_rc5
OR
easy_software_productscupsMatch1.1.20
OR
gnomegpdfMatch0.112
OR
gnomegpdfMatch0.131
OR
kdekofficeMatch1.3
OR
kdekofficeMatch1.3.1
OR
kdekofficeMatch1.3.2
OR
kdekofficeMatch1.3.3
OR
kdekofficeMatch1.3_beta1
OR
kdekofficeMatch1.3_beta2
OR
kdekofficeMatch1.3_beta3
OR
kdekpdfMatch3.2
OR
pdftohtmlpdftohtmlMatch0.32a
OR
pdftohtmlpdftohtmlMatch0.32b
OR
pdftohtmlpdftohtmlMatch0.33
OR
pdftohtmlpdftohtmlMatch0.33a
OR
pdftohtmlpdftohtmlMatch0.34
OR
pdftohtmlpdftohtmlMatch0.35
OR
pdftohtmlpdftohtmlMatch0.36
OR
tetextetexMatch1.0.7
OR
tetextetexMatch2.0
OR
tetextetexMatch2.0.1
OR
tetextetexMatch2.0.2
OR
xpdfxpdfMatch0.90
OR
xpdfxpdfMatch0.91
OR
xpdfxpdfMatch0.92
OR
xpdfxpdfMatch0.93
OR
xpdfxpdfMatch1.0
OR
xpdfxpdfMatch1.0a
OR
xpdfxpdfMatch1.1
OR
xpdfxpdfMatch2.0
OR
xpdfxpdfMatch2.1
OR
xpdfxpdfMatch2.3
OR
xpdfxpdfMatch3.0
Node
debiandebian_linuxMatch3.0
OR
debiandebian_linuxMatch3.0alpha
OR
debiandebian_linuxMatch3.0arm
OR
debiandebian_linuxMatch3.0hppa
OR
debiandebian_linuxMatch3.0ia-32
OR
debiandebian_linuxMatch3.0ia-64
OR
debiandebian_linuxMatch3.0m68k
OR
debiandebian_linuxMatch3.0mips
OR
debiandebian_linuxMatch3.0mipsel
OR
debiandebian_linuxMatch3.0ppc
OR
debiandebian_linuxMatch3.0s-390
OR
debiandebian_linuxMatch3.0sparc
OR
gentoolinux
OR
kdekdeMatch3.2
OR
kdekdeMatch3.2.1
OR
kdekdeMatch3.2.2
OR
kdekdeMatch3.2.3
OR
kdekdeMatch3.3
OR
kdekdeMatch3.3.1
OR
redhatenterprise_linuxMatch2.1advanced_server
OR
redhatenterprise_linuxMatch2.1advanced_server_ia64
OR
redhatenterprise_linuxMatch2.1enterprise_server
OR
redhatenterprise_linuxMatch2.1enterprise_server_ia64
OR
redhatenterprise_linuxMatch2.1workstation
OR
redhatenterprise_linuxMatch2.1workstation_ia64
OR
redhatenterprise_linuxMatch3.0advanced_server
OR
redhatenterprise_linuxMatch3.0enterprise_server
OR
redhatenterprise_linuxMatch3.0workstation_server
OR
redhatenterprise_linux_desktopMatch3.0
OR
redhatfedora_coreMatchcore_2.0
OR
redhatlinux_advanced_workstationMatch2.1ia64
OR
redhatlinux_advanced_workstationMatch2.1itanium_processor
OR
susesuse_linuxMatch8.0
OR
susesuse_linuxMatch8.1
OR
susesuse_linuxMatch8.2
OR
susesuse_linuxMatch9.0
OR
susesuse_linuxMatch9.0x86_64
OR
susesuse_linuxMatch9.1
OR
susesuse_linuxMatch9.2
OR
ubuntuubuntu_linuxMatch4.1ia64
OR
ubuntuubuntu_linuxMatch4.1ppc

References

Related

gentoo 4
openvas 31
ubuntucve 4
cve 4
freebsd 1
nessus 45
ubuntu 3
debiancve 4
cvelist 4
securityvulns 4
nvd 3
redhat 10
debian 6
osv 3
suse 3
prion 1
centos 2
oraclelinux 1
gentoo
gentoo
GPdf, KPDF, KOffice: Vulnerabilities in included xpdf
2004-10-28 00:00:00
Xpdf, CUPS: Multiple integer overflows
2004-10-21 00:00:00
teTeX, pTeX, CSTeX: Multiple vulnerabilities
2005-01-23 00:00:00
openvas
openvas
SLES9: Security update for CUPS
2009-10-10 00:00:00
FreeBSD Ports: gpdf, cups-base
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200410-20 (Xpdf)
2008-09-24 00:00:00
ubuntucve
ubuntucve
CVE-2004-0888
2005-01-27 00:00:00
CVE-2004-0889
2005-01-27 00:00:00
CVE-2008-1374
2008-04-04 00:00:00
cve
cve
CVE-2004-0889
2005-01-27 05:00:00
CVE-2004-0888
2005-01-27 05:00:00
CVE-2005-0206
2005-04-27 04:00:00
freebsd
freebsd
xpdf -- integer overflow vulnerabilities
2004-10-21 00:00:00
nessus
nessus
SUSE-SA:2004:039: xpdf, gpdf, kdegraphics3-pdf, pdftohtml, cups
2004-10-26 00:00:00
FreeBSD : xpdf -- integer overflow vulnerabilities (ad2f3337-26bf-11d9-9289-000c41e2cdad)
2005-07-13 00:00:00
GLSA-200410-20 : Xpdf, CUPS: Multiple integer overflows
2004-10-21 00:00:00
ubuntu
ubuntu
xpdf vulnerabilities
2004-11-02 00:00:00
tetex-bin vulnerabilities
2004-10-28 00:00:00
xpdf vulnerabilities
2004-10-23 00:00:00
debiancve
debiancve
CVE-2004-0888
2005-01-27 05:00:00
CVE-2004-0889
2005-01-27 05:00:00
CVE-2005-0206
2005-04-27 04:00:00
cvelist
cvelist
CVE-2004-0888
2004-10-26 04:00:00
CVE-2004-0889
2004-10-26 04:00:00
CVE-2005-0206
2005-02-15 05:00:00
securityvulns
securityvulns
[KDE security advisory] Multiple integer overflows in kpdf
2004-10-22 00:00:00
[ GLSA 200501-31 ] teTeX, pTeX, CSTeX: Multiple vulnerabilities
2005-01-26 00:00:00
MDKSA-2004:114 - Updated gpdf packages fix DoS vulnerability
2004-10-22 00:00:00
nvd
nvd
CVE-2004-0889
2005-01-27 05:00:00
CVE-2008-1374
2008-04-04 00:44:00
CVE-2005-0206
2005-04-27 04:00:00
redhat
redhat
(RHSA-2004:592) xpdf security update
2004-10-27 00:00:00
(RHSA-2005:213) xpdf security update
2005-03-04 00:00:00
(RHSA-2004:543) cups security update
2004-10-22 00:00:00
debian
debian
[SECURITY] [DSA 599-1] New tetex-bin packages fix arbitrary code execution
2004-11-25 14:48:24
[SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution
2004-11-02 15:35:44
[SECURITY] [DSA 573-1] New cupsys packages fix arbitrary code execution
2004-10-21 14:18:22
osv
osv
tetex-bin - integer overflows
2004-11-25 00:00:00
xpdf - integer overflows
2004-11-02 00:00:00
cupsys - integer overflows
2004-10-21 00:00:00
suse
suse
remote system compromise in xpdf, gpdf, kdegraphics3-pdf, pdftohtml, cups
2004-10-26 10:45:14
local privilege escalation in libtiff
2004-10-22 14:52:41
potential remote buffer overflow in samba
2004-11-15 22:07:05
prion
prion
Integer overflow
2008-04-04 00:44:00
centos
centos
cups security update
2008-04-01 17:06:38
tetex security update
2005-04-01 21:29:55
oraclelinux
oraclelinux
kdegraphics security update
2006-11-30 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

High

0.07 Low

EPSS

Percentile

94.0%

JSON
Related for NVD:CVE-2004-0888
gentoo4openvas31ubuntucve4cve4freebsd1nessus45ubuntu3debiancve4cvelist4securityvulns4nvd3redhat10debian6osv3suse3prion1centos2oraclelinux1