CVE-2004-0888
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as...
CVE-2004-0888 is a high vulnerability (CVSS 10.0) in Easy Software Products Cups, published October 21, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 9.51%, the 95th percentile. Fixed in cups 1.1.22-6.
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
Exploit likelihood
What each source reports
NVD Score used
10.0
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
CVE-2004-0888- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
CVE-2004-0888- Updated
- 2026-11-02
EUVDEUVD-2004-0886 No score
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
EUVD-2004-0886- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-x479-x3mc-r9mr No score
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as...
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
GHSA-x479-x3mc-r9mr- Updated
- 2026-11-02
OSV No score
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
CVE-2004-0888- Updated
- 2026-11-02
OSVDEBIAN-CVE-2004-0888 No score
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
- Record
DEBIAN-CVE-2004-0888- Updated
- 2026-11-02
Affected products
- easy software products cups
- gnome gpdf
- kde
- kde koffice
- kde kpdf
- xpdf
- debian linux
- gentoo linux
- pdftohtml
- redhat enterprise linux
- redhat enterprise linux desktop
- redhat fedora core
Show 4 moreShow less
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsDebian:12 |
before 1.1.22-6 | 1.1.22-6 |
cupsDebian:13 |
before 1.1.22-6 | 1.1.22-6 |
cupsDebian:14 |
before 1.1.22-6 | 1.1.22-6 |
xpdfDebian:12 |
before 3.00-9 | 3.00-9 |
xpdfDebian:13 |
before 3.00-9 | 3.00-9 |
xpdfDebian:14 |
before 3.00-9 | 3.00-9 |
cupsysDebian:3.0 |
before 1.1.14-5woody10 | 1.1.14-5woody10 |
xpdfDebian:3.0 |
before 1.00-3.2 | 1.00-3.2 |
tetex-binDebian:3.0 |
before 1.0.7+20011202-7.3 | 1.0.7+20011202-7.3 |
cupsRed Hat:enterprise_linux:3::as |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
Show 63 moreShow less
| Package | Affected | Fixed |
|---|---|---|
cups-debuginfoRed Hat:enterprise_linux:3::as |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-develRed Hat:enterprise_linux:3::as |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-libsRed Hat:enterprise_linux:3::as |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cupsRed Hat:enterprise_linux:3::desktop |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-debuginfoRed Hat:enterprise_linux:3::desktop |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-develRed Hat:enterprise_linux:3::desktop |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-libsRed Hat:enterprise_linux:3::desktop |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cupsRed Hat:enterprise_linux:3::es |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-debuginfoRed Hat:enterprise_linux:3::es |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-develRed Hat:enterprise_linux:3::es |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-libsRed Hat:enterprise_linux:3::es |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cupsRed Hat:enterprise_linux:3::ws |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-debuginfoRed Hat:enterprise_linux:3::ws |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-develRed Hat:enterprise_linux:3::ws |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
cups-libsRed Hat:enterprise_linux:3::ws |
before 1:1.1.17-13.3.16 | 1:1.1.17-13.3.16 |
xpdfRed Hat:enterprise_linux:3::as |
before 1:2.02-9.3 | 1:2.02-9.3 |
xpdf-debuginfoRed Hat:enterprise_linux:3::as |
before 1:2.02-9.3 | 1:2.02-9.3 |
xpdfRed Hat:enterprise_linux:3::desktop |
before 1:2.02-9.3 | 1:2.02-9.3 |
xpdf-debuginfoRed Hat:enterprise_linux:3::desktop |
before 1:2.02-9.3 | 1:2.02-9.3 |
xpdfRed Hat:enterprise_linux:3::es |
before 1:2.02-9.3 | 1:2.02-9.3 |
xpdf-debuginfoRed Hat:enterprise_linux:3::es |
before 1:2.02-9.3 | 1:2.02-9.3 |
xpdfRed Hat:enterprise_linux:3::ws |
before 1:2.02-9.3 | 1:2.02-9.3 |
xpdf-debuginfoRed Hat:enterprise_linux:3::ws |
before 1:2.02-9.3 | 1:2.02-9.3 |
kdegraphicsRed Hat:enterprise_linux:4::as |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::as |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-develRed Hat:enterprise_linux:4::as |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphicsRed Hat:enterprise_linux:4::desktop |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::desktop |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-develRed Hat:enterprise_linux:4::desktop |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphicsRed Hat:enterprise_linux:4::es |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::es |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-develRed Hat:enterprise_linux:4::es |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphicsRed Hat:enterprise_linux:4::ws |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::ws |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
kdegraphics-develRed Hat:enterprise_linux:4::ws |
before 7:3.3.1-3.3 | 7:3.3.1-3.3 |
tetexRed Hat:enterprise_linux:3::as |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-afmRed Hat:enterprise_linux:3::as |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-debuginfoRed Hat:enterprise_linux:3::as |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-dvipsRed Hat:enterprise_linux:3::as |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-fontsRed Hat:enterprise_linux:3::as |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-latexRed Hat:enterprise_linux:3::as |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-xdviRed Hat:enterprise_linux:3::as |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetexRed Hat:enterprise_linux:3::desktop |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-afmRed Hat:enterprise_linux:3::desktop |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-debuginfoRed Hat:enterprise_linux:3::desktop |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-dvipsRed Hat:enterprise_linux:3::desktop |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-fontsRed Hat:enterprise_linux:3::desktop |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-latexRed Hat:enterprise_linux:3::desktop |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-xdviRed Hat:enterprise_linux:3::desktop |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetexRed Hat:enterprise_linux:3::es |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-afmRed Hat:enterprise_linux:3::es |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-debuginfoRed Hat:enterprise_linux:3::es |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-dvipsRed Hat:enterprise_linux:3::es |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-fontsRed Hat:enterprise_linux:3::es |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-latexRed Hat:enterprise_linux:3::es |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-xdviRed Hat:enterprise_linux:3::es |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetexRed Hat:enterprise_linux:3::ws |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-afmRed Hat:enterprise_linux:3::ws |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-debuginfoRed Hat:enterprise_linux:3::ws |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-dvipsRed Hat:enterprise_linux:3::ws |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-fontsRed Hat:enterprise_linux:3::ws |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-latexRed Hat:enterprise_linux:3::ws |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
tetex-xdviRed Hat:enterprise_linux:3::ws |
before 0:1.0.7-67.7 | 0:1.0.7-67.7 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
redhat.com/support/errata/RHSA-2004-592.html
securityfocus.com/bid/11501
redhat.com/support/errata/RHSA-2005-066.html
ubuntu.com/usn/usn-9-1
mandriva.com/security/advisories?name=MDKSA-2004:113
gentoo.org/security/en/glsa/glsa-200410-20.xml
Show 67 moreShow less
debian.org/security/2004/dsa-581
debian.org/security/2004/dsa-573
bugzilla.fedora.us/show_bug.cgi?id=2353
mandriva.com/security/advisories?name=MDKSA-2004:116
debian.org/security/2004/dsa-599
exchange.xforce.ibmcloud.com/vulnerabilities/17818
redhat.com/support/errata/RHSA-2005-354.html
redhat.com/support/errata/RHSA-2004-543.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9714
distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886
mandriva.com/security/advisories?name=MDKSA-2004:114
gentoo.org/security/en/glsa/glsa-200410-30.xml
mandriva.com/security/advisories?name=MDKSA-2004:115
marc.info?l=bugtraq&m=109880927526773&w=2
marc.info?l=bugtraq&m=110815379627883&w=2
nvd.nist.gov/vuln/detail/CVE-2004-0888
github.com/advisories/GHSA-x479-x3mc-r9mr
security-tracker.debian.org/tracker/CVE-2004-0888
access.redhat.com/errata/RHSA-2004:543
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=99461
bugzilla.redhat.com/show_bug.cgi?id=132034
bugzilla.redhat.com/show_bug.cgi?id=134599
bugzilla.redhat.com/show_bug.cgi?id=135378
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_543.json
access.redhat.com/security/cve/CVE-2004-0888
bugzilla.redhat.com/show_bug.cgi?id=1617315
cve.org/CVERecord?id=CVE-2004-0888
access.redhat.com/security/cve/CVE-2004-0923
bugzilla.redhat.com/show_bug.cgi?id=1617323
cve.org/CVERecord?id=CVE-2004-0923
nvd.nist.gov/vuln/detail/CVE-2004-0923
access.redhat.com/errata/RHSA-2004:592
bugzilla.redhat.com/show_bug.cgi?id=135393
security.access.redhat.com/data/csaf/v2/advisories/2004/rhsa-2004_592.json
access.redhat.com/errata/RHSA-2005:066
kde.org/info/security/advisory-20041223-1.txt
kde.org/info/security/advisory-20050119-1.txt
bugzilla.redhat.com/show_bug.cgi?id=144231
bugzilla.redhat.com/show_bug.cgi?id=147517
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_066.json
access.redhat.com/security/cve/CVE-2004-1125
bugzilla.redhat.com/show_bug.cgi?id=1617371
cve.org/CVERecord?id=CVE-2004-1125
nvd.nist.gov/vuln/detail/CVE-2004-1125
access.redhat.com/security/cve/CVE-2005-0064
bugzilla.redhat.com/show_bug.cgi?id=1617441
cve.org/CVERecord?id=CVE-2005-0064
nvd.nist.gov/vuln/detail/CVE-2005-0064
access.redhat.com/errata/RHSA-2005:354
bugzilla.redhat.com/show_bug.cgi?id=137475
bugzilla.redhat.com/show_bug.cgi?id=137607
bugzilla.redhat.com/show_bug.cgi?id=137973
bugzilla.redhat.com/show_bug.cgi?id=145129
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_354.json
access.redhat.com/security/cve/CVE-2004-0803
bugzilla.redhat.com/show_bug.cgi?id=1617294
cve.org/CVERecord?id=CVE-2004-0803
nvd.nist.gov/vuln/detail/CVE-2004-0803
access.redhat.com/security/cve/CVE-2004-0804
bugzilla.redhat.com/show_bug.cgi?id=1617295
cve.org/CVERecord?id=CVE-2004-0804
nvd.nist.gov/vuln/detail/CVE-2004-0804
access.redhat.com/security/cve/CVE-2004-0886
bugzilla.redhat.com/show_bug.cgi?id=1617314
cve.org/CVERecord?id=CVE-2004-0886
nvd.nist.gov/vuln/detail/CVE-2004-0886