CVE-2004-0888: Integer Overflow
Published Oct 26, 2004
·Updated
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
Affected Software
112 affected componentsFixes available
ubuntu/cupsys<1.2.0-0ubuntu5
1.2.0-0ubuntu5
ubuntu/cupsys<1.2.0-0ubuntu5
1.2.0-0ubuntu5
ubuntu/cupsys<1.2.0-0ubuntu5
1.2.0-0ubuntu5
ubuntu/gpdf<2.10.0-2
2.10.0-2
ubuntu/gpdf<2.10.0-2
2.10.0-2
ubuntu/kdegraphics<3.5.2-0ubuntu6
3.5.2-0ubuntu6
ubuntu/kdegraphics<3.5.2-0ubuntu6
3.5.2-0ubuntu6
ubuntu/kdegraphics<3.5.2-0ubuntu6
3.5.2-0ubuntu6
ubuntu/koffice<1.5.0-0ubuntu9.2
1.5.0-0ubuntu9.2
ubuntu/koffice<1.5.2-0ubuntu2.2
1.5.2-0ubuntu2.2
ubuntu/koffice<1.6.2-0ubuntu1.1
1.6.2-0ubuntu1.1
ubuntu/pdftohtml<0.36-13
0.36-13
ubuntu/pdftohtml<0.36-13
0.36-13
ubuntu/pdftohtml<0.36-13
0.36-13
ubuntu/tetex-bin<3.0-13ubuntu6
3.0-13ubuntu6
ubuntu/tetex-bin<3.0-13ubuntu6
3.0-13ubuntu6
ubuntu/tetex-bin<3.0-13ubuntu6
3.0-13ubuntu6
debian/cups
2.3.3op2-3+deb11u62.3.3op2-3+deb11u22.4.2-3+deb12u52.4.10-1
debian/xpdf
3.04+git20210103-33.04+git20220601-13.04+git20240613-1
Easy Software Products Cups=1.0.4
Easy Software Products Cups=1.0.4_8
Easy Software Products Cups=1.1.1
Easy Software Products Cups=1.1.4
Easy Software Products Cups=1.1.4_2
Easy Software Products Cups=1.1.4_3
Easy Software Products Cups=1.1.4_5
Easy Software Products Cups=1.1.6
Easy Software Products Cups=1.1.7
Easy Software Products Cups=1.1.10
Easy Software Products Cups=1.1.12
Easy Software Products Cups=1.1.13
Easy Software Products Cups=1.1.14
Easy Software Products Cups=1.1.15
Easy Software Products Cups=1.1.16
Easy Software Products Cups=1.1.17
Easy Software Products Cups=1.1.18
Easy Software Products Cups=1.1.19
Easy Software Products Cups=1.1.19_rc5
Easy Software Products Cups=1.1.20
Gnome Gpdf=0.112
Gnome Gpdf=0.131
KDE Koffice=1.3
KDE Koffice=1.3.1
KDE Koffice=1.3.2
KDE Koffice=1.3.3
KDE Koffice=1.3_beta1
KDE Koffice=1.3_beta2
KDE Koffice=1.3_beta3
KDE kpdf=3.2
Pdftohtml Pdftohtml=0.32a
Pdftohtml Pdftohtml=0.32b
Pdftohtml Pdftohtml=0.33
Pdftohtml Pdftohtml=0.33a
Pdftohtml Pdftohtml=0.34
Pdftohtml Pdftohtml=0.35
Pdftohtml Pdftohtml=0.36
teTeX teTeX=1.0.7
teTeX teTeX=2.0
teTeX teTeX=2.0.1
teTeX teTeX=2.0.2
xpdf Xpdf=0.90
xpdf Xpdf=0.91
xpdf Xpdf=0.92
xpdf Xpdf=0.93
xpdf Xpdf=1.0
xpdf Xpdf=1.0a
xpdf Xpdf=1.1
xpdf Xpdf=2.0
xpdf Xpdf=2.1
xpdf Xpdf=2.3
xpdf Xpdf=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Gentoo Linux
KDE kde=3.2
KDE kde=3.2.1
KDE kde=3.2.2
KDE kde=3.2.3
KDE kde=3.3
KDE kde=3.3.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=2.1
redhat Enterprise Linux=3.0
redhat Enterprise Linux=3.0
redhat Enterprise Linux=3.0
redhat Enterprise Linux Desktop=3.0
redhat Fedora Core=core_2.0
redhat Linux Advanced Workstation=2.1
redhat Linux Advanced Workstation=2.1
SUSE SuSE Linux=8.0
SUSE SuSE Linux=8.1
SUSE SuSE Linux=8.2
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.0
SUSE SuSE Linux=9.1
SUSE SuSE Linux=9.2
Ubuntu Ubuntu Linux=4.1
Ubuntu Ubuntu Linux=4.1
Remediation
Patch Available
Patch Available
Event History
Oct 26, 2004
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Jun 13, 2024
Data Sourced
via Launchpad·04:22 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-0888?
CVE-2004-0888 is considered critical as it can lead to denial of service and potential arbitrary code execution.
2
How do I fix CVE-2004-0888?
To fix CVE-2004-0888, upgrade to the patched versions of affected packages such as cups, gpdf, and kdegraphics.
3
Which software is affected by CVE-2004-0888?
CVE-2004-0888 affects xpdf, cups, gpdf, and kdegraphics among other packages utilizing xpdf code.
4
What type of vulnerability is CVE-2004-0888?
CVE-2004-0888 involves multiple integer overflows in certain PDF processing software.
5
Is remote exploitation possible with CVE-2004-0888?
Yes, CVE-2004-0888 allows remote attackers to exploit the vulnerability to crash the application.