CVE-2004-0888
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as...
10.0 HighFix available
CVE-2004-0888 is a high vulnerability (CVSS 10.0) in Easy Software Products Cups, published October 21, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.51%, the 95th percentile. Fixed in cups 1.1.22-6.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 9.51%EPSS, 95th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.1.22-6cups +72 more
Description
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
Exploit likelihood
9.51%Up 1.3 points since Feb 4, 2022
Affected products
- easy software products cups
- gnome gpdf
- kde
- kde koffice
- kde kpdf
- xpdf
- debian linux
- gentoo linux
- pdftohtml
- redhat enterprise linux
- redhat enterprise linux desktop
- redhat fedora core
Show 4 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsDebian:12 | before 1.1.22-6 | 1.1.22-6 |
cupsDebian:13 | before 1.1.22-6 | 1.1.22-6 |
cupsDebian:14 | before 1.1.22-6 | 1.1.22-6 |
xpdfDebian:12 | before 3.00-9 | 3.00-9 |
xpdfDebian:13 | before 3.00-9 | 3.00-9 |
xpdfDebian:14 | before 3.00-9 | 3.00-9 |
cupsysDebian:3.0 | before 1.1.14-5woody10 | 1.1.14-5woody10 |
xpdfDebian:3.0 | before 1.00-3.2 | 1.00-3.2 |
tetex-binDebian:3.0 | before 1.0.7+20011202-7.3 | 1.0.7+20011202-7.3 |
cupsRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
Show 63 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cups-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-develRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-libsRed Hat:enterprise_linux:3::as From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cupsRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-develRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cupsRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-develRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-libsRed Hat:enterprise_linux:3::es From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cupsRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-develRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-libsRed Hat:enterprise_linux:3::ws From an advisory covering 2 CVEs | before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
xpdfRed Hat:enterprise_linux:3::as | before 1:2.02-9.3 | 1:2.02-9.3 |
xpdf-debuginfoRed Hat:enterprise_linux:3::as | before 1:2.02-9.3 | 1:2.02-9.3 |
xpdfRed Hat:enterprise_linux:3::desktop | before 1:2.02-9.3 | 1:2.02-9.3 |
xpdf-debuginfoRed Hat:enterprise_linux:3::desktop | before 1:2.02-9.3 | 1:2.02-9.3 |
xpdfRed Hat:enterprise_linux:3::es | before 1:2.02-9.3 | 1:2.02-9.3 |
xpdf-debuginfoRed Hat:enterprise_linux:3::es | before 1:2.02-9.3 | 1:2.02-9.3 |
xpdfRed Hat:enterprise_linux:3::ws | before 1:2.02-9.3 | 1:2.02-9.3 |
xpdf-debuginfoRed Hat:enterprise_linux:3::ws | before 1:2.02-9.3 | 1:2.02-9.3 |
kdegraphicsRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-develRed Hat:enterprise_linux:4::as From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphicsRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-develRed Hat:enterprise_linux:4::desktop From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphicsRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-develRed Hat:enterprise_linux:4::es From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphicsRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-develRed Hat:enterprise_linux:4::ws From an advisory covering 3 CVEs | before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
tetexRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-afmRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-dvipsRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-fontsRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-latexRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-xdviRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetexRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-afmRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-dvipsRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-fontsRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-latexRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-xdviRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetexRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-afmRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-dvipsRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-fontsRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-latexRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-xdviRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetexRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-afmRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-dvipsRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-fontsRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-latexRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-xdviRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs | before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
What each source reports
NVD Score used
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
CVE-2004-0888- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
CVE-2004-0888- Updated
- 2026-11-02
EUVDEUVD-2004-0886No score
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
EUVD-2004-0886- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x479-x3mc-r9mrNo score
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as...
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
GHSA-x479-x3mc-r9mr- Updated
- 2026-11-02
OSVNo score
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
CVE-2004-0888- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0888No score
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
DEBIAN-CVE-2004-0888- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/support/errata/RHSA-2004-592.html
securityfocus.com/bid/11501
ubuntu.com/usn/usn-9-1
mandriva.com/security/advisories?name=MDKSA-2004:113
gentoo.org/security/en/glsa/glsa-200410-20.xml
Show 67 moreShow less
debian.org/security/2004/dsa-581
bugzilla.fedora.us/show_bug.cgi?id=2353
exchange.xforce.ibmcloud.com/vulnerabilities/17818
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9714
distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886
marc.info?l=bugtraq&m=109880927526773&w=2
nvd.nist.gov/vuln/detail/CVE-2004-0888
github.com/advisories/GHSA-x479-x3mc-r9mr
security-tracker.debian.org/tracker/CVE-2004-0888
access.redhat.com/errata/RHSA-2004:543
bugzilla.redhat.com/show_bug.cgi?id=99461
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_543.json
cve.org/CVERecord?id=CVE-2004-0888
kde.org/info/security/advisory-20041223-1.txt