{"id":"CVE-2004-0888","published":"2004-10-26T04:00:00Z","modified":"2024-08-08T00:31:47Z","title":"Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and…","vendor":null,"product":null,"tier":"tail","description":{"text":"Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.09511,"percentile":0.95429,"provenance":"source"},"cwes":[],"references":[{"url":"http://www.redhat.com/support/errata/RHSA-2004-592.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.securityfocus.com/bid/11501","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-066.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://www.ubuntu.com/usn/usn-9-1/","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:113","tags":["vendor-advisory","x_refsource_MANDRAKE"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://www.debian.org/security/2004/dsa-581","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"http://www.debian.org/security/2004/dsa-573","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://bugzilla.fedora.us/show_bug.cgi?id=2353","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:116","tags":["vendor-advisory","x_refsource_MANDRAKE"]},{"url":"http://www.debian.org/security/2004/dsa-599","tags":["vendor-advisory","x_refsource_DEBIAN"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17818","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.redhat.com/support/errata/RHSA-2005-354.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.redhat.com/support/errata/RHSA-2004-543.html","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9714","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886","tags":["vendor-advisory","x_refsource_CONECTIVA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:114","tags":["vendor-advisory","x_refsource_MANDRAKE"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2004:115","tags":["vendor-advisory","x_refsource_MANDRAKE"]},{"url":"http://marc.info/?l=bugtraq&m=109880927526773&w=2","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://marc.info/?l=bugtraq&m=110815379627883&w=2","tags":["vendor-advisory","x_refsource_FEDORA"]}],"priority":{"score":19.1,"factors":[{"name":"EPSS percentile","points":19.09}]},"euvd":{"id":"EUVD-2004-0886","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-cve-2004-0888-family-cve-2004-0888","children":[{"from":"CVE-2004-0888","to":"CVE-2005-0206","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.","from":"CVE.org","in":"CVE-2005-0206"}]},{"from":"CVE-2004-0888","to":"CVE-2008-1374","relation":"incomplete-fix","confidence":"high","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"incomplete-fix","quote":"NOTE: this issue is due to an incomplete fix for CVE-2004-0888.","from":"CVE.org","in":"CVE-2008-1374"}]}]}}