CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
94.0%
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use
xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to
cause a denial of service (crash) and possibly execute arbitrary code, a
different set of vulnerabilities than those identified by CVE-2004-0889.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 6.06 | noarch | cupsys | < 1.2.0-0ubuntu5 | UNKNOWN |
ubuntu | 6.10 | noarch | cupsys | < 1.2.0-0ubuntu5 | UNKNOWN |
ubuntu | 7.04 | noarch | cupsys | < 1.2.0-0ubuntu5 | UNKNOWN |
ubuntu | 6.06 | noarch | gpdf | < 2.10.0-2 | UNKNOWN |
ubuntu | 6.10 | noarch | gpdf | < 2.10.0-2 | UNKNOWN |
ubuntu | 6.06 | noarch | kdegraphics | < 3.5.2-0ubuntu6 | UNKNOWN |
ubuntu | 6.10 | noarch | kdegraphics | < 3.5.2-0ubuntu6 | UNKNOWN |
ubuntu | 7.04 | noarch | kdegraphics | < 3.5.2-0ubuntu6 | UNKNOWN |
ubuntu | 6.06 | noarch | koffice | < 1.5.0-0ubuntu9.2 | UNKNOWN |
ubuntu | 6.10 | noarch | koffice | < 1.5.2-0ubuntu2.2 | UNKNOWN |